last executing test programs: 10.90631532s ago: executing program 2 (id=2979): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000010900)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c10806000108000e040001aaaaaaaaaa37ffffffffffffff7faabb640101009ee8fa75b481900c554321ee065ca29424a8603d8a15beb9a07bc6f7d33d7a024507b904d9f25de2e24c946ab4c25cc901fec28d66ac725cd40ed27bbbdf9e9b67319d06dc15ba3ed60a67875ba6f0da5497dc7b7647646f44ee0231691e0ccf57ffa9771e52fc602d3c81f653c6ce4766328c5687c042819951b42d322844ab59a8a904450891a0a67e665044711c4fbec628b73097ff9e98ef2406800c2652cb4fd6"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x10021d, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x3, 0x0, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x64, 0x0, 0x2e, 0x29, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x7, 0x19, [@remote]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x3, 0x0, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x64, 0x0, 0x2e, 0x29, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x7, 0x19, [@remote]}]}}}}}) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1, 0x3, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000010040)=ANY=[@ANYBLOB="b0080000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf25080000005000018008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f6d616376746170000000080003000200000008000300000000000800030001000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="4c000180736c6176655f3000005aca151300890c0e00000000000000", @ANYRES32=r10, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="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"], 0x8b0}, 0x1, 0x0, 0x0, 0x844}, 0xc880) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000010040)=ANY=[@ANYBLOB="b0080000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf25080000005000018008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f6d616376746170000000080003000200000008000300000000000800030001000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="4c000180736c6176655f3000005aca151300890c0e00000000000000", @ANYRES32=r10, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="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"], 0x8b0}, 0x1, 0x0, 0x0, 0x844}, 0xc880) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000010000)={'vxcan0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000010ac0)={'erspan0\x00', &(0x7f0000010a00)={'syztnl0\x00', r10, 0x8, 0x1, 0x7, 0x8, {{0x1d, 0x4, 0x3, 0x1, 0x74, 0x65, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@cipso={0x86, 0x35, 0x0, [{0x5, 0x12, "3b3f28f07b5280017d333c0c670b21c5"}, {0x2, 0xe, "527b4701aef8346cf8d3e8c7"}, {0x2, 0xf, "d89273e50c35b2116d62dd7d42"}]}, @generic={0x7, 0x4, "2abf"}, @lsrr={0x83, 0x23, 0xe7, [@rand_addr=0x64010100, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @dev={0xac, 0x14, 0x14, 0x2d}]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x1000, @empty}}, 0xfffd, 0x2000}, 0x90) sendmmsg$inet(r12, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x1, 0x20048041) 10.536189437s ago: executing program 2 (id=2980): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009ee"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00", @ANYRESDEC], 0xc0}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x658}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3e3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xc5b5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x48326ce8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6f25}]}, 0x5c}}, 0x4081) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x4c, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x4800) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004800}, 0xc000) 10.194848889s ago: executing program 2 (id=2983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="b44c844a8d9cf6c8cac6f076d471cb0200000004", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x9, 0x1}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000640)=ANY=[@ANYBLOB="20010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800020001000000080001"], 0x120}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0xfffffffffffffe57, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES16=r11, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000804", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.546084264s ago: executing program 2 (id=2988): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) (async) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000400000000000000090000850000005400000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) 9.123094788s ago: executing program 2 (id=2991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x25, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x11, 0x0, @opaque="04000000000000a5d4"}}}, 0x33) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25df5bfb, {0x0, 0x0, 0x0, r9, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x2000a100) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) 6.935587021s ago: executing program 2 (id=2999): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) syz_emit_ethernet(0xf7, &(0x7f0000000100)={@link_local, @empty, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x8e, 0x1, "67fa", "c55ca12fa145074b2a26eee4fbf64b40ec8977b1ce650034eb872c8b497a690ea9da7ed6eda2244b269aa8f8543b08829dc6e97ba761914488e06f92e80a9432299cf31c9a5938732061989faecbe2b10d549b3a3828e818e6b1bf1acc85e42c5899293ff7e0dcf1819ec330546b2ac13690b291e7d4a77754894607218f59590bdbc9e38fa0aa6afc0d6c3f7b36bcb05f9e4b87f20d7977b3e1282960b782cf407109f5bffb69a499424dc274ebcd7ebca45a901e861996658733a431b95c32c5b877be4c893e99d53eb363d974b3bf11b45b38c99c0032349e4b5253"}}}}}, 0x0) 4.328763054s ago: executing program 0 (id=3012): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x7, 0x1, 0x5, 0x1c0, 0x0, 0x4, 0x239f}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000014008503000000000000009be0064800", @ANYRES32=0x0], 0x18}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x25a5, 0x0) write$nci(r2, &(0x7f0000000440)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xff, @b={0x1, 0x2, 0x6, 0x1, 0xb2, 0xe2, 0xfc, {0xbc, "3202d063a7d6e9fcc4f72e3fe063c2311555beb2041e117f09fe15260f81e89ec7600351062a32347508505ee75efc5288e6718f73298dd866a14a1ec8f1f03500bf683b80d97e7e7dc24dc653db2047396e15175d79b03e3e285adf542af13964ead10596671c74785ec6bc2829a8d765a0eae96d98b1882c5a67f334ec8b71beedabac1d425ae47c2e2b1ea3bc4cacabd97045b05819b27399d98169df7bf0869cacd3a4ba413f7dbfdf93310e358035bf6c835f45138d92333364"}, 0x6, 0xec, 0x7, 0xb9, 0x6a, "fa49a4a620b449ad1d24d29876aca3317257f93e1aca3e5d1d04b5efad413b4c62b420abd45d784716df28bc52b81629de72b0a33dc14e72bf20e09280035b5593acdb10bb18b7c5bedde60da6cc17fb9d43e88997e361e0224502e9fa87232b64533617d3b860bcf0c7"}}, 0x136) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r5], 0x30}], 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30000001) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) 3.940520992s ago: executing program 3 (id=3015): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000), 0x12) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000040)={0x2, 0xfffffffffffffff5}) close(r0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x82}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x6c}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x80}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xa3f75c290caec305}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x46}]}, 0x44}, 0x1, 0x0, 0x0, 0x2014}, 0x804) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000280)={0x42f, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000006700)={0x1, 0x1}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000006700)={0x1, 0x1}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000006780), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000006880)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006840)={&(0x7f00000067c0)={0x74, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000006880)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006840)={&(0x7f00000067c0)={0x74, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000800) connect$rxrpc(r1, &(0x7f00000068c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @remote, 0x9}}, 0x24) (async) connect$rxrpc(r1, &(0x7f00000068c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @remote, 0x9}}, 0x24) writev(r2, &(0x7f00000069c0)=[{&(0x7f0000006900)="4f0e19b5f895b7cfb9832da028c9ab8e5d4cb9015a2e5aa114bd62c4e83f5da88c1d80f4dc542b3006a01adc3a142c390764b82027e59a0bdb000d27dd8c9f37f5f965b3df4cfb3f82b21a1d8cbdbfedff1be15cedc55f9c99f8506bd10ce3a78f7672ac50dd5253dfacf51f5d17f0e0c982b4bfb3e30ebe2c6f17b57701336298ecf137eee8c9f8500c85cba4f55070a8950ec13c47984c8b89aa7d6078e606caa0220d24cb6fb3e32210c2b08c6b8ee22ad858beb4c037580c4f", 0xbb}], 0x1) write$cgroup_subtree(r1, &(0x7f0000006a00)={[{0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'cpu'}]}, 0x1a) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000006a40), &(0x7f0000006a80)=0x4) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000006a40), &(0x7f0000006a80)=0x4) sendto$x25(r0, &(0x7f0000006ac0)="2889851561eefc2fe67ee89534d3b8f0eca177795c2b2e704d769f5b2e63c83d6fb9d5879461ac90bc6a26cf8c39ff8685c446444e5072f35536a00b214d5783eddd5fdeef84aa3ec37e7e5194420517e5f29625e8e0", 0x56, 0x4000054, 0x0, 0x0) (async) sendto$x25(r0, &(0x7f0000006ac0)="2889851561eefc2fe67ee89534d3b8f0eca177795c2b2e704d769f5b2e63c83d6fb9d5879461ac90bc6a26cf8c39ff8685c446444e5072f35536a00b214d5783eddd5fdeef84aa3ec37e7e5194420517e5f29625e8e0", 0x56, 0x4000054, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000006b40)=0x3, &(0x7f0000006b80)=0x2) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000006c00), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000006cc0)={&(0x7f0000006bc0)={0x10, 0x0, 0x0, 0x10201}, 0xc, &(0x7f0000006c80)={&(0x7f0000006c40)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) epoll_create1(0x80000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000006d40), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000006e00)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d80)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) (async) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000006e00)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d80)={0x24, r8, 0x8, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) recvmsg$can_bcm(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000006f40)=[{&(0x7f0000006e40)=""/75, 0x4b}, {&(0x7f0000006ec0)=""/73, 0x49}], 0x2, &(0x7f0000006f80)=""/144, 0x90}, 0x10103) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000070c0)={&(0x7f0000007080), 0x0, 0x6, 0x0, 0x9, 0x6, 0x9, 0x1, 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f0000007240)={&(0x7f0000007140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007200)={&(0x7f00000071c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 3.825164259s ago: executing program 0 (id=3016): socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x48}}, 0x2c8f7fe15199d603) close(0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f0000000100)=r2, 0x4) 3.52732193s ago: executing program 3 (id=3017): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, &(0x7f00000000c0)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.47138341s ago: executing program 1 (id=3018): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @loopback, 0x5}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x60, 0x140b, 0x105, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040d0}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 3.46274422s ago: executing program 0 (id=3019): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4008080) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x1b, 0x0, 0x0, 0x81, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x4}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff6}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a0300000000000000000ffa0000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 2.994010747s ago: executing program 1 (id=3021): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @local}}, 0x26, 0x5, 0x6, 0x8, 0x32}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000140)=0x8) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r2, &(0x7f0000000340)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0xdbf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}}, 0x80, 0x0}, 0x48090) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x40000040, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000008c0), 0x8) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 2.945206605s ago: executing program 4 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009f30100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES16=r0], 0x84}}, 0x0) 2.747353697s ago: executing program 0 (id=3023): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x739}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x739}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) 2.679756356s ago: executing program 4 (id=3024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000180)=""/177, &(0x7f0000000240)=0xb1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000003c0)) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x18, 0x8, 0x70bd28, 0x25dfdbff, {0x18}, [@typed={0x4, 0x122}, @generic="e3799383668eddbc40bf243a0ef53e66c37179fef368fe81b775db4fd2372795d23de1a7b9e8504273d64135ae28aef051082fee7127b2849b6282174767d921b95ae7dc44819216a3305f5947c7c2a104a9aded1fbd1a5005d9f7c2e209eee60463626c1792fd0e600a4bdf85a57c47ed2de1ab90caa3e66ac28edd64043764443f4c323811a4fbd671e4117af8b6446c", @nested={0x8, 0xf1, 0x0, 0x1, [@nested={0x4, 0x5b}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000) syz_80211_join_ibss(&(0x7f0000000580)='wlan0\x00', &(0x7f00000005c0)=@default_ap_ssid, 0x6, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x20, 0x1, 0x6, 0xb8, {{0x1b, 0x4, 0x0, 0x2e, 0x6c, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0xc, "2b5695e805ec8f8ef2d8"}, @timestamp_addr={0x44, 0x14, 0x3c, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @timestamp={0x44, 0x14, 0x5f, 0x0, 0x2, [0xfffffe01, 0xfffffffe, 0x6, 0x9]}, @timestamp_addr={0x44, 0x24, 0x82, 0x1, 0x0, [{@empty, 0x1}, {@multicast2, 0xd8d9}, {@local, 0x1}, {@multicast2, 0x1}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3, 0x1, 0x0, @private2, @mcast2, 0x700, 0x40, 0x4, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x4, 0x4, 0xc, 0x1, 0x4, @local, @private0, 0x8, 0x10, 0x1, 0x6}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000b40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x118, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20002040}, 0x800) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000b80)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x1, 0x7, 0x0, 0x4, 0x3, 0xffffffff80000001}, {0x101, 0x2, 0x5, 0xffffffff, 0x3, 0x3ff}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r9 = accept4$vsock_stream(r0, &(0x7f0000000d80)={0x28, 0x0, 0x2710}, 0x10, 0x0) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e00)=0x14) getsockname$packet(r10, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e80)=0x14) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000fc0)={'ip6tnl0\x00', &(0x7f0000000f40)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x6, 0x6, 0x12, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x80, 0xfffffffc, 0x9}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001240)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001000)={0x1ec, r12, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x90}, 0x40000) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r14, &(0x7f0000001280), 0x8) writev(r14, &(0x7f0000002400)=[{&(0x7f00000012c0)="f8432890660e7a0b11f6f7fbe1e36760fc13dd18d6ee3cee35309e19c59a744fa99023059b8f11de37ace13cef137fa1ddcec8ac08fae32a44b4d9671849ad7369163f19406d17c5143d465c3073b2474598ca76fd34743e2ec075058656ff7a02a3595ca3008f6e83f39bb69d190569944417cdfdc950882d856b24a5591b129a7fb9e070d596e816d1909c0af598c48b8ae95b25707d90e93fcd60e2774a66c00578652ded5bc99bee053d1b98186286b5148315b2808e2fab98ab570b9a1706cbac5fa4193b78bc640ac533a18a61d1e70ada473a4dd2b69d209bf3f401cdfc0446db4423347332206104325ef8aba696eee1eb94085eb23bc50669142fc9a54975d1d5b3069971a5345134f643fa4f3975a78234ec220a5751d735b6fc5079439e807d224d2d2f4b28420b8ee8ca32e75f4ca507d77902a6ae7c08cdd299de929ab2020d6630b87f6aeb82e4fb8fbd41d954a64d46b19a2c24be732f57a0ba75716d0faa01e23a906d358e91637f7ed50efad8acc41d397a13d50fb64599a049cab939c7e339b5e6523caeec137a1afe98e27f553b70784c104c5c59a73f356317e15eeccd72a69da57c1169d67b4885878e78f3bf0952f1e8213ca224d5c7c0375258153d4a147b14d41e275b8eb6bf4ce5d49e78d2c4d4e2668bf3e3944ff4ddf173a9610d2520f55b7a0b416b59b0e1a8686c08fb464c3389fc4554cf850223f3440e2f25cbb7a164b84744d7c66414f9fd3fee64fac3e7c9b43937ad0d61d61fe9ecdc230f682a708973d609186da668e7e0cd68f792313dc00efbc83e10f0fa844cd98bfee427b7c7af5261adbed987e78f07ccb9281e57f837eff3d3e6d14063205958a7922705a2db9053b3978d485b4c983713d8a932cf03e10c10a1daaa8aea8afcc91bb702e88e57226868f6d3b41df227ed8f4e6b855c5f7c915918d850961b50adbea840c00ea0ecd800da1516d22afc321ba32cd210e4d81fa2e12b8f086142fceea8863b420bb819de8d341ca99e6acf809fba2e3939f60e6fa0bdba6b878ea35571ec5c24b76e1f384f0361f03a4b4cf280d7d3c4720170d2160e96c436a3ea4c894f2115a7da84998638a5c49d5ed16362f870525e4ba372c4b91338b7aac804881b6a3f9a0994173c1d5937be93c130041d648b41d30d5e49eb8b1c53ff885997649cb8b9a25e2cf1dc8f8caa8cc7c4eb90ccf678f7aa2390af3aee297971ee7a524d3c323e2d488d53744f4364b0f96a5cbb9e2c099752180a6ba979c8823c1ab5c0b7ce14f470ee80b261638da27897bfd0ba2836b5021af8e11a4daba7587ad04f80ec1dbe6aaebe269747b67cd27d1c7017af5b624a6ee9c017b5648c9f5032bd369062ae2e9cbad754259abc10c3b73c80dbac02e498c6fbffe2535122bc4ea641b453f4a6521f13f6db00dab3a1ce460464edd2361aadef2f62e0e8f26f9241a940bb86f8618e0255cd8995d26dc5f146eb6e9abcebdf4ee30fb2dae538811fcbe1140af05798588c0a7b7fab6b140e4dd3eafd7208afc7bb44e4b3b78c7e28a6f69a83ef07b2579318994cbce294a9f0873fa5811f36ebbeb276436828a3d711ce3f5bbf1c8dee2952233d59b72e8b85e93fa003677740517252ccda6af3d092a844773eba00eb3911705ab479dbc3bc7f0c24e46b72cc8ced6271ca305e6f221cd5f58f890288e8e706d4c5af73083e74bf038fab11df80efef48a4d720f7016b62f2f092c935584ec83d36d120359f42a10488d826a46150eeb57412ab4694a34414f8b84ce4ee26d0e3a08d41ab06be46ad0c7fa3b62e4689bf83f462dce6f13cedac4b3180192c95fc8c1e41a225825f5d6723f0966397c9773e59a807fdff054d27f00788ec4ddf327aa066ba58c2f084abad1204df1aaed1f197c839c6bcf2224d756aa0020691d7348e5f439aa7666d99fe9d768e3702e5d50b04a951ca0cd82bbac5fa881d83d9a66098f6365c72b2207930c6a6d31b28c675216d258e7e57dc21c1aeffe43483d0f7ce7e1166b6a3c029461d3e389acaf11815937d5fde3916c0faff7719b5265d5afd55e81ac7f9863ec4f1b16258f44e17fcaf3b7da10791e3206122e4a0e8b20093bf240a03b40bfbfe73af21d10457eb92d703b33611f2098b8807eff3674d33e3666ecb58462ff199673199cd285d70dcc297247cb05ccba63afde4c25b3ca065798c4153865b950c49357eb9344dbedb783387308df921fa44bcfd54da3af59529e3aa01e9e5eeec076b409f01efc846a86facb696d7cac008e0e0f56272bfddcc9db38e293dfb659903e2ef8346c6d00983552d5ece2800f34317ccd5539bfd4a94bf65c8c40a08a80a3bf76911278064d74a676209b8d1bcd12253c694da836f410f8cf1608ce97cf3e397eb0f4f207574ace9a6aa7381d935d78556ac85c2061bbc045f594cabb9b2ed5c1d4f00320e2427768615132dee44d59fb2ac7da282997b1da46f092371d475b17b52a6d126676981416f0be63784207b857e33af4f5710d81b7d65d617756a60bd97aba3058244c1e8d03279814e386d93d7d1791b3756270b5c6daa272aec2c66335c9866e5ee34431925cb6598fdbcef066df47bbbd48bb96620c55c95aab2c9ece63b2acc27bef9a132d3da2e3b233f8f31734d66b55ac3167a80ee4e699f7957d49cc4bddaa13a756e7b7fc598de7ba18869f58be2b39581bfbf648b0d8f0a2efca3fb49990d8db8cc93f4f6e96e720978e2d826c7cf120f1cbdb1d780f3445e5c134a2c3432da67ca2ceb8284bbcc796f92bb1cdb1983a448e90f1138bd5a62b02f13d0289530191f4734d736c7027ee7f7686b96d9960046dad3c15ffd6527cdebc81018d2fac630b8225508f881732124e38c1e0c426ab52824701eea6d9e94c62cae354aefdc78644d302a90be1794018b20493d472695232ae3a72dbcaad481b499d85db9ef7ccfcd0bcad5df67c61bbc70e9a33f3e17997a86690214da9845f82ff2e67ec2f1a9cd4b8812fffdcf4caaf6256eeeeb3a9a0473fb6381af6cf30b71e266b68ebdb47ed311c5db1abc4e28061160fdd081b7b0fd7ecc2b3a7d019c7cbb70adb77c037b61e0e7c900c42587a54a83f27ca4d3fe3595ea5d3b50205185dd5ea7ddd0249e91cde265033b28b1feba5d70d5cc6430cd710701924a7816114a3ae8aca53b2d27de0e10f660fac3d336f05a3b22c75170cfa0d82afe4cceb3d2f8e34fd103abf515269240ab3d2dd89d093286afadab06edf308d19396999076c4b7b5ec8f5efcf57596f3609ae2e9b295a43b8831173b8d48dfbe49a326b296d0535a538367ff835ad93a4d561a2fb77dcdc313eda342bc46288538ed8325f22a134b244e1d9a01ef81478ae79c09070d63e498091e37ac45a9aba0d5ceeeb70e3f2064bce83de18f3b5229872b6199eec22339e4df6b0077f838b22234173a547a239ce64faeba6ed2982ef8bc710874d6cd7cd8992514a9d4af3ceff2af644424254f7f013a58d4798eaf9e8706dfa075215ebe72083047393a9f00e68b9ff5d2de504b2ac8abeda88afc3f03f9c4dfbba76b09c73bb6e83d0d9a5b445de0c3a926ce17bd3ade41aa510cd7739682e508ff0c83da2be85a84ee54f56a610b7771fdb39a302fc1b96d77634fb374aafa69ff9ffba096b950d74722736b0a7ee2afc382bd084d0290c7c7b6b20ebc8c2cd099352645c7fde981a72516673302b143fe7b3543ab3b3eb94aaa1c79a1323595c87348be3c856f8d150eb696d254f7eadb49e63a49c86a5c3ead2bf5182cfe34d5448ea0906b9d3910d3dd2004bf53de3ff206efaa41dfdfbf546e931dba7a9392bc166cb9b1ce496bde2727ae588737c7764a23213814a6a4fce6e5181e522f5fbf53f3fd9eda84e582ba0f6a6d952f32d6dd9284cd0c61f589c806f7ec9dc554950149a995d727258b99bcbf69719638abe66ba72380e9023221018fe0d33f4efacd4c52243c7cfa725d5d50f52ac3d823aa14a80e4e5dc01705f424be7b4c3d61e467a237c34cb7f07a60fdaf92a60e3bcc237ea4ca463742e646a1fbd81dd18bd32dd8eddbbac6148565e0b56f7ba29ce11c5bee8f292ce553ef053d3538f2ab263c309e430f4de044acf066e9ea8257d144b3b11b62edb0f09f4867f832730d6021c792a729a6e2d3de8be87f598859ac8e23ea45d78766ee0dd8818c16f12c9548acf0696517acd8948648cdc5b8e0dab16ea83215d3537a312fbcbb6bd0d19582cf66e1c0477acbd59c265d73941ca891d48cda2cad6dad1ba9592fb96817b54892fbc6451318bedf414c66c0613ae5b003176870561e470ac4343f3f1310440c8051f73025f125d065d305f88ecdfc07a5279eca2b99f9643df16b4b219796b245ef4789fdc0fd919419915a9d898cad138fe04e49f6f37325dd6a3911180307d967e1d7e09386432764a4ffece8480d0c19972cc69d871be8c6bd6f8825770d04b5727e7e224fb4fa7cae32ec8ddc56fdea0bbb739c94b956eacfe9897ef868fe03886284611bfb1e2b17bcb53016ad2358596fdf58f0906ab8b8198eaf9f738b0c6cecfd9dce221089c58b91276f4183eba9b31033267ac6bbde9639019f1636de35482389e94d8526a697b4b60bdf4a39c2206e736fe3029b5b33b822bc39fc71c6ea008b8eb2dafc376eac6f075f8972db869a82acdb9abbdff87d78a79e61d160d44e7e46f6634c6b07b65e33654494f89c2c0cd73deeb80365b8e2c0faa67fab844de5a864d1d2209e21fe291b8052513d12c6c7f47d31dfe5ef9ed23542ebb706d9e2b2b3dd9773a2e5f883aa2a5a50e30a02941524faa3f3f9b9359b324995929e24fbd81112899693333a1f1b521333958417747376c9eb94d0f57e8ec137c2abedfd9168e891de2456a1760cc94ac0a46ba8bdf6f649e947885eee9bfe121f8364bed145da345ab670cbfa611a3699d2508dd35f45c2b836b863a0dfc7faf79454e016e0b0a660ee0b4653c7524023f8142932b57e5919a515d7d371f26269024151fbcb81f4e38d64b1e02342494e51ef9966336712289b42b8b34ff3d7f23273173224688197d9572a164694e73327c9af75b21fb83bd94ce002cb26553f16f7e273634c2c97816073948780ac59f2fb0152bd018c89b5d647bb1747986456d1a50841e4f24020d54ed64cab5b0d2421ed77e71dd687b3290403fb228a76d52fd3f9e92af232c1f6c1dac3d014c12b988838c97c5daa2d2ae6800f63dc11f49315ab8e04d06674207e080e6e0f80b99f61226ed322a3f6285d7bdeeea12b532baecf219bf535d290966b07322bd9bd0b80a697034abc802d7dd0b0d498b4bb220587500d78af45130f618beb826e93280e3601b0992fdee673445750b5c5841410475ecc3a0e4abbc2fb2bcb6242c2f3d1bcb4839b83922cd73cec8f2f47eb1f11a9f0f9f2a44f0b833b9ef9a6e82659eddeee02feba98796d61f47cdd0abd1116349c58b66cf1e42b2b3c8e46c3b286dbe40fbe80e4ba3e9970064d6aace480addb4ef47038f8bc36d12ef2cd33e702ac40c320dd6fb9c773b0a7ad7fa98b6a1750c352258ce5e68f4898f4beb783ac6cc2b2ec8fab1481f067596e5561a7d4fc5a0aea1a7fa9574566d360a1efd7bb8893dc6deac0054756c1f4c574e9636b523fb9e276089b7ad288d52fd2ab2de740d3c9c58eefef072cc8b49dc5c9fdb8e391b92199ddefba4d9822c3082e39d29678fe19f80c803a929d22c2ad2d5b90ba761f938ebe857f5d800da2105a302cd1073da7b5", 0x1000}, {&(0x7f00000022c0)="a95efa3debe5a680c51796e8de51f35e2639572328019878f270eeb3b2295db3ab630399f03b3d066fce8e9462ecc6decd35b334a0d61fe643ccb2f5725b81c9b89d1e9ff849040482a66603a20d486b1ebdb3509cbb9c7ee7e143611d0c7ab07085c405e4ffa6fe35d1a845b8b7c6e3ddba458ee1a7733be0c96f7c8efed8c6e95a6eed33d4af6620d00ede84110b881677e806c7475ca826b95b9774d056f1135cad6bc5f7c07d", 0xa8}, {&(0x7f0000002380)="ceae0a95541da36c4fd3990a50e3395c90692931a07eceaa60a6a8da00e129fdbcf74fe5b1e2ef99c85ff06185f0ad0e16ccc608d53b5dfcffd4fcc14f7e257dce806d2dfe43a00c314366cdbdb3284a423685e6e3fa3c6faecd6485dffbf3a233dd87132d14b1902517a9f026275c1ae1a55f7f702ed70e", 0x78}], 0x3) bind$bt_sco(r14, &(0x7f0000002440)={0x1f, @none}, 0x8) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000002480)=0x10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x17, 0x14, &(0x7f0000002540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x0, 0x5, 0x6, 0x8, 0xfffffffffffffff8, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002600)='GPL\x00', 0x3, 0x6b, &(0x7f0000002640)=""/107, 0x41000, 0x10, '\x00', r4, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000003e00)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000003e40)={0x0, 0x3, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000043c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000004400)=[{0x1, 0x4, 0x5, 0x6}, {0x4, 0x1, 0x5, 0x1}, {0x3, 0x4, 0x4, 0x5}, {0x3, 0x4, 0xa, 0xa}, {0x1, 0x5, 0xb, 0x2}, {0x4, 0x2, 0xd}], 0x10, 0x9}, 0x94) 2.652858968s ago: executing program 1 (id=3025): close(0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt(r0, 0x2, 0x58ec, &(0x7f0000000000), 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'ipvlan1\x00', {'wlan0\x00'}, 0x433}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x4, @rand_addr=0x64010102, 0x4e22, 0x3, 'lc\x00', 0x2, 0xc, 0x6d}, 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xc}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbb13}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x39}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0x4044) r3 = socket(0x25, 0x4, 0x9) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000280)=""/228, &(0x7f0000000380)=0xe4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000580)={0x100000001, {0x0, 0x2, 0x3, 0x5, 0x3}}) r6 = socket(0x2b, 0x80000, 0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000005c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000700)={r7, 0xb4, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x5, @empty, 0x9}, @in6={0xa, 0x4e22, 0x0, @loopback, 0xff}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000740)=0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, &(0x7f0000000780)) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) sendmsg$alg(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)="d4702ae2d294c2a0901f5eecc73ead72345e0bfb93e65eeb44a5693efaff284670858d9c44daca416a8aa6b6099e03ab1140d26fa45d1a86c234a8073ba66da80d677878fcdc21e1d59893b5a254cea3515df1ffb8cad6a11d82393fd81fa66ddf9263f995f1929085e1e0110356098e5f92fbb6e9b4a7a18bb34c34e492474c134092fa3e966afe9c1d5fde9fd2ca44d41ddb9654562bcae5e1defba44246e03b0aa600279a46", 0xa7}, {&(0x7f0000000880)="a802a35c5d1c295966aa3e8686204c7ca4d14e76ca1d10445ad7d46a7dd00872109243cd3e8ce3b243959e7b013bf054dc45aa09ec8a373e9d99cf7779b17668cf1ec092f7e24cb8e8fd51eeb9687f3d04ae26dbcc5ef001cc349ae3a799700ba651d08f2a16820cef13a6ec34e5be642841efe20dc2", 0x76}, {&(0x7f0000000900)="83b5dab0c9442ea12ad5e7374b0c2d298b095d15abca304490c7ad82af134c5833a699a2dd7cd812b5dee069fcf7fa9f0da3e95192e0b157b15631cda175e0d52bdf2e644bbd18529998bd16f9fbec4b592fc4ddc6a02ba7639eb1", 0x5b}], 0x3, &(0x7f00000009c0)=[@assoc={0x18, 0x117, 0x4, 0x58}], 0x18, 0x4000000}, 0x84) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000a40)={0x2, 0x7, "a71c89", 0x3, 0x68}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000b40)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x0, 0x9, {{0xc, 0x4, 0x2, 0x4, 0x30, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @private=0xa010100, {[@timestamp={0x44, 0x8, 0x49, 0x0, 0x2, [0xb]}, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x1, [{@empty, 0x5cad}, {@rand_addr=0x64010100, 0x7}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002300)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000d80)={0x153c, r9, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9f5a}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "05d36c69d485d4c4131074565dc771c04d859bb323b9c9bbcd421eecd68cf5ee4d54b03f304f7b71eeb28ac218c656b69a0a4a5d35835ed64b4847da808d00fdc6c4935c049143c2075ed792512c34cf0c10b3a71492ed49a5d07895d7a95d845070e5da980bdc46481e9d792592bed367d1acf1242923da52f4086189c535ec222c2e6fbc39cb7eb0b0805d9dd463d08e7be1d2b8222e08839576256b56d066959b5b3d27050775c45fa4625633a872734c9b05356f1e0b73efb8f217e86b885384c19f15c5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "0fdc6784a2a3e15bb4866f025d1b715b3e2d4f175d21061fd8528a89b5a055ab8e43411550ff7f9924a7e2f45a003fece9e98244f051291b16d707bb36efe6589d25d4c21f0c7962c8a7819b4ba4eedf6ad9cdf54e484d0e01c29c5591beb581a86b45a36ccc0920432ed4ed067316762914d26a13a1f75a089c2b92ff49b94ff3ddce8d9dde7119966cb2d736"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "c36b9a7261601fc664e59340b0164611d4f38964c68fadbd0433a68079c9d9ee22ad09d8ce77e627a1d7d7a9359566570c046a"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x12b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "357e3d172d8fbb72ca7ac3b59f2b1ac358eed7bc68336d8b7188b13430d2882eb0774c4673ba6adf582abbac1d31141ce95d0c6dba212990389fd00f835fe79416315fbcdb3704e91f4a27cc2bbb82ce68891d0d6450dbec323a2322550a93fd9398b32b883818d537a8a142336cb4707cdf20b5f5e090e7376629ab0fdadf6cbde1100fd4b22d307c8ba26732b4c1778f0834ca1ebcc28e45eff16284d6e6dc79d19045eae1a6bbb779dc1b50722e7e95a0f0aa1e5226cd4ad263ef583330a5dee30475491cd5d6a3b803596e5aa05982e2e671a92ae7aabdbb2b284eff569d74"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "96401f44b69b3e1e056b0673eedf85dc656de6ee0d5e1df175357f5f1cc44ef65aad34c86fcb4ba196695fee8b54ceb627f0e1316dd083e7809fabf02f53046f5ab87e345714c6629fd0e7c518a068c21c216bbba1bfd63856b3a29ac87cbd5805ff0c6e357748e1cbc39cd543dd1b7b785356707abc21fe55384ecc0d421092d25a9cad1711ffecf4b100d4366c343eb5c4db2a843730ab45f1b908595be0d14b54162ea2130df5ba120da1053ba5924067d4b5fc683f91e72e58207079b85e6b8f8e3808a03b6addbb5838a570f92690ce77"}, @ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "c9fb7d29d6b1a9eeb9fca51e004ccfbe12b888a15d54d534ce8f19fe05b7f3aeda5b6495754a62452fb77bf7b1509e9141361a53b79f689576eca11d2609f8ec599436c0534ba71aa0d7f5ccbe93607462ce57e03533b90e5c410ce35c58b34c1cd130e3cfa7afcce9b276da98c0f24616c384671ca3b415773bfecdaf1c810f531152b13c992abc639d94b7bae1a6688fe9a8126dc9af3a3a7e498663060354953d608be209353fd1412e2de3f08f89c7c000003e1598c183d1e9f38acb69cc4ddbbc80539d495b9f21e7983f59593b7e918a18ddbac865618576ea7d4b11dfd95d356e"}]}]}, 0x153c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.518801954s ago: executing program 3 (id=3026): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="6d2e340bd1babc5db8de6cc15d0998660885edd7b0a68d8c42db9f4cfd44bb35bd6384bac5213fc186495f5e33e9316bee5d35758ea2b234562ff43d9b8634182025bab2e2ce878eca64a7ac0c227d2d3aecde4687c746196cd7044786557a5878fb5277a1a08da154ab1da8cc6cb11ea4086d5c11c688d821e80ffbbbe055ad4c13cce0a78d61e825f67b707aad48a8ad55723f25033dfd9736f218b56a51d702e791fe4de0c49d8c5357df4373b8739b9e4b", 0xb3}, {&(0x7f00000000c0)="588dacb0cdf41b377a3fc842e231feb2af3f323eb944a066486fecd60899c2d326ac97e679947b8ba08fdb8501b7f4a548d861e512ec", 0x36}, {&(0x7f0000000100)="806e1dda7b22d189b6fd69f8ccbbe0a449086fbd44ac3a063b0e9b88a42f20f8e96fa839d42cb396db02f8576d7911df83d5dc905cf050586cf397f926cd4d18adaa46a8ecb42f74f73fae079908c235f074b7968cc4dfbd489a24975661658d01a363f0b55da38547d68f25834bd6b42dafd34a5f3899b3c9c0e33ebc8f867ba3d5bc03a21f0a7e1d318f3eecc4686411dcd616fc74743e17bf175a9886", 0x9e}, {&(0x7f00000001c0)="d7483a9f2619c05112a2fa50747e3771a90dbbb96df15a7d436b2ff6fa372a8bd2dc04ff", 0x24}, {&(0x7f0000000200)="c32cf193f2b7200e8e7d0fda1778b393dbfe06bbf6ef99228cc82ea5c42e101108429aa50ba61aafce58dc4f5feedb464bd449a6a0c78c22fec2abdeb68e7b2e03bda768fe0d628d8e7370d3a329b7c4aebefab17e61dc0784af475174a4e5b016233069e967160abd5783b083158539c7148eab45949f4f9ebfdf8914ead42dd1a988214f6eb76782e015eb3ebfbdaa3e0b02d99703fad62e36da799b207c5fc0211169bd801619fb2fd86fc26f19003e264250838de43dbcb29caafb05c526f6a55f2f3b004abc38065a77", 0xcc}, {&(0x7f0000000300)}, {&(0x7f0000000340)="90ee72d6f6d3536e124ca49e26a89447b454f51ebb4f454991fb1c6daea88ab6ba4f0672f2ab715e87544381b30bc75447b2b54b758fa2862554a6a04a71216f4a9a605f683fb397ea6becdd018cb5c30e0176d644476f9f940e4d5190f836febd0b20b9eec25d", 0x67}], 0x7, &(0x7f0000000440)=[@iv={0x40, 0x117, 0x2, 0x2b, "d8de81c6625c0b186325e654a92c965219ba561587ab71c6d6282cbeabdbda8244705e8beeccb6db1ccfc7"}], 0x40, 0x20040000}, 0x84) (async) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="6d2e340bd1babc5db8de6cc15d0998660885edd7b0a68d8c42db9f4cfd44bb35bd6384bac5213fc186495f5e33e9316bee5d35758ea2b234562ff43d9b8634182025bab2e2ce878eca64a7ac0c227d2d3aecde4687c746196cd7044786557a5878fb5277a1a08da154ab1da8cc6cb11ea4086d5c11c688d821e80ffbbbe055ad4c13cce0a78d61e825f67b707aad48a8ad55723f25033dfd9736f218b56a51d702e791fe4de0c49d8c5357df4373b8739b9e4b", 0xb3}, {&(0x7f00000000c0)="588dacb0cdf41b377a3fc842e231feb2af3f323eb944a066486fecd60899c2d326ac97e679947b8ba08fdb8501b7f4a548d861e512ec", 0x36}, {&(0x7f0000000100)="806e1dda7b22d189b6fd69f8ccbbe0a449086fbd44ac3a063b0e9b88a42f20f8e96fa839d42cb396db02f8576d7911df83d5dc905cf050586cf397f926cd4d18adaa46a8ecb42f74f73fae079908c235f074b7968cc4dfbd489a24975661658d01a363f0b55da38547d68f25834bd6b42dafd34a5f3899b3c9c0e33ebc8f867ba3d5bc03a21f0a7e1d318f3eecc4686411dcd616fc74743e17bf175a9886", 0x9e}, {&(0x7f00000001c0)="d7483a9f2619c05112a2fa50747e3771a90dbbb96df15a7d436b2ff6fa372a8bd2dc04ff", 0x24}, {&(0x7f0000000200)="c32cf193f2b7200e8e7d0fda1778b393dbfe06bbf6ef99228cc82ea5c42e101108429aa50ba61aafce58dc4f5feedb464bd449a6a0c78c22fec2abdeb68e7b2e03bda768fe0d628d8e7370d3a329b7c4aebefab17e61dc0784af475174a4e5b016233069e967160abd5783b083158539c7148eab45949f4f9ebfdf8914ead42dd1a988214f6eb76782e015eb3ebfbdaa3e0b02d99703fad62e36da799b207c5fc0211169bd801619fb2fd86fc26f19003e264250838de43dbcb29caafb05c526f6a55f2f3b004abc38065a77", 0xcc}, {&(0x7f0000000300)}, {&(0x7f0000000340)="90ee72d6f6d3536e124ca49e26a89447b454f51ebb4f454991fb1c6daea88ab6ba4f0672f2ab715e87544381b30bc75447b2b54b758fa2862554a6a04a71216f4a9a605f683fb397ea6becdd018cb5c30e0176d644476f9f940e4d5190f836febd0b20b9eec25d", 0x67}], 0x7, &(0x7f0000000440)=[@iv={0x40, 0x117, 0x2, 0x2b, "d8de81c6625c0b186325e654a92c965219ba561587ab71c6d6282cbeabdbda8244705e8beeccb6db1ccfc7"}], 0x40, 0x20040000}, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000580)={0x540, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0xa4, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x18}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfe}, @NFTA_SYNPROXY_MSS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_EXPRESSIONS={0x44c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x384, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x374, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "930e78fd505d4d1d66dd217ed635e9d91041aa77e64452783a0abc7b04ccfc4c5578b371bd68c3689a7135f337e82d7c15f089f14a851ebac1b1d858"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x70, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_RANGE_FROM_DATA={0xd8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "4c61d946a1c87596e68da02ff2e34d13b4ae773317e1855998d0c6a0bc86ab8be63061b099f84c883e06529a412d9c980db0f2c83ed2478fef76e90d93fe03280fca7906b6fd241ff03ece276c653c2507a1413ad41f8b72564a5db59fd84310209f6dd3f96a7a61c16ab0a68d49b95cdd"}, @NFTA_DATA_VALUE={0x3d, 0x1, "8d9864458b855f545807a68f8b72bbfd04a18ddd97a3e21aebbc03e8ad8077c6f64f20d3cd44f68b649c930dc59f0469dd690d5e6bca9ccf0a"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "5492ecab8a5d809f"}]}, @NFTA_RANGE_TO_DATA={0x110, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "e16ac3f33dfbc9bb9f35019990395c79ea571c817efa37d1ba6fa7423ad840f1bda4069a6b405d8e261580ffa3d39fc4d1675f6f28ab9bd808fbd17de391bc6402ff002c0549179e4d819d2319204cf7adae0a081ee666b7d7030db2f5a14507dd30698538279d060a0b53f02e38e771faaa3f7de9167261f9d93178a77a10f6f0eb61b95c473e57f3"}, @NFTA_DATA_VALUE={0x4d, 0x1, "2d6949510672b70e763fac49599c70de664034b7596ae83b2f90c155c7052d2407798c1dfe102422239f1be6b6894efc4dd84d0e5672c84a0e27a368a8ed359464f72178c38cfeaaeb"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x540}, 0x1, 0x0, 0x0, 0x20040000}, 0xc8) (async) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000580)={0x540, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0xa4, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x18}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfe}, @NFTA_SYNPROXY_MSS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_EXPRESSIONS={0x44c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x384, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x374, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "930e78fd505d4d1d66dd217ed635e9d91041aa77e64452783a0abc7b04ccfc4c5578b371bd68c3689a7135f337e82d7c15f089f14a851ebac1b1d858"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x70, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_RANGE_FROM_DATA={0xd8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "4c61d946a1c87596e68da02ff2e34d13b4ae773317e1855998d0c6a0bc86ab8be63061b099f84c883e06529a412d9c980db0f2c83ed2478fef76e90d93fe03280fca7906b6fd241ff03ece276c653c2507a1413ad41f8b72564a5db59fd84310209f6dd3f96a7a61c16ab0a68d49b95cdd"}, @NFTA_DATA_VALUE={0x3d, 0x1, "8d9864458b855f545807a68f8b72bbfd04a18ddd97a3e21aebbc03e8ad8077c6f64f20d3cd44f68b649c930dc59f0469dd690d5e6bca9ccf0a"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "5492ecab8a5d809f"}]}, @NFTA_RANGE_TO_DATA={0x110, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "e16ac3f33dfbc9bb9f35019990395c79ea571c817efa37d1ba6fa7423ad840f1bda4069a6b405d8e261580ffa3d39fc4d1675f6f28ab9bd808fbd17de391bc6402ff002c0549179e4d819d2319204cf7adae0a081ee666b7d7030db2f5a14507dd30698538279d060a0b53f02e38e771faaa3f7de9167261f9d93178a77a10f6f0eb61b95c473e57f3"}, @NFTA_DATA_VALUE={0x4d, 0x1, "2d6949510672b70e763fac49599c70de664034b7596ae83b2f90c155c7052d2407798c1dfe102422239f1be6b6894efc4dd84d0e5672c84a0e27a368a8ed359464f72178c38cfeaaeb"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x540}, 0x1, 0x0, 0x0, 0x20040000}, 0xc8) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000c80)={r0, &(0x7f0000000b80)='syz1\x00', 0x120c0, &(0x7f0000000bc0)={@_ha_fsid={[0x0, 0xffff]}, {0x0, 0xfff9, 0xf, 0x9}}, 0xff, &(0x7f0000000c00)={@_ha_fsid}, &(0x7f0000000c40)=0x3}) bind$can_j1939(r3, &(0x7f0000000cc0)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000d40)={0x1d, r4, 0x1, {0x1, 0x0, 0x4}, 0x2}, 0x18) (async) bind$can_j1939(r3, &(0x7f0000000d40)={0x1d, r4, 0x1, {0x1, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f0000000d80)={0x1d, r4, 0x1, {0x1, 0x1, 0x2}, 0xfe}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000dc0)={'pimreg1\x00', 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000ec0)={0x1, 0x9, 0x98, &(0x7f0000000e00)=""/152}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000ec0)={0x1, 0x9, 0x98, &(0x7f0000000e00)=""/152}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000f00)={0x3, "7df075"}, 0x6) sendmsg$can_j1939(r3, &(0x7f0000001080)={&(0x7f0000000f40)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18, &(0x7f0000001040)={&(0x7f0000000f80)="151da60fbae9a34224af6a009d3a0e5c900702eb6eed6b4daf02c2bfca5604e073177107a8b417fc659dcddea62d87ba37eee664492ddbeb80bcbfc868ee10399bc6974db74086024959f93191a9526ff8e55c8d1fa28d0142f7c216a9fb82af701d3d6d8a2c43d985cf81c3ffa94dede9d0499ff496ce00eef28c8305195d7f7a8598e6eea0e3e5c29567446f691ac2c23ca7d43f771e2ffb42b10f84c1a90884f3d7c4c9bb2d", 0xa7}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) r6 = accept4(r3, &(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000001140)=0x80, 0x1800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x40, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0d0bfe96c77b"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400), 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000014c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r5, r3, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x21, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd1dd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x7, 0x0, 0xa, 0x8, 0x4, 0xffffffffffffffc0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @ldst={0x1, 0x0, 0x3, 0x7, 0x9, 0xffffffffffffffc0, 0x10}]}, &(0x7f00000013c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001440)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0x4, 0x134, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r8, r3], 0x0, 0x10, 0x1ea91eb}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_BALANCE(r9, 0x5000940c, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001640)={'team0\x00', 0x4000}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001640)={'team0\x00', 0x4000}) sendmsg$nl_route(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@getnetconf={0x14, 0x52, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x24000800) (async) sendmsg$nl_route(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@getnetconf={0x14, 0x52, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x24000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001780), 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x48, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xa212ec5e4c0d0007}, 0x2400401a) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000001900)=0x2, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000001900)=0x2, 0x4) getpeername$packet(r3, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001980)=0x14) (async) getpeername$packet(r3, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001980)=0x14) sendmsg$kcm(r6, &(0x7f0000002240)={&(0x7f00000019c0)=@xdp={0x2c, 0x0, r11, 0x1}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a40)="e484f203c2e1b16c058f250c63b9e8489bd179b0271bbe413d4d3d89300d0d67dc460c16a09c0c687571073313eff52538b28b3141ef508f96920b444c6f9efd8f6e17ee43675fbc1bebbae88d7698c9033a4384ca2922c44fbc5d7153430063c644abf3b0a7807d8eb348bc2659660233d5eac90085d07ccb991072b360eb4d70ad6ee345d1b2903be88f364c7d7e9c8a0d3e675d6419d28447c58501fe076ef045587450ca24c727d3634136", 0xad}, {&(0x7f0000001b00)="440f5c2b143468d88ee559744c8347cf9b4d90e6792953bd168d18cdbd0e967dff88ccab48ff28ba431c090be96fada4b39126cda98c79b358a1acfbf39073df66c1d9fdfd1cc3b27cdcce1f5d517014e998bc56c2fc3e6282f65737d95dccc3924e216152c9fea10088f02358c051", 0x6f}, {&(0x7f0000001b80)="1099028972bee05f3dd9b206164348a8036e816f94449ef3d4b6ff198d3c3486e99679769ca1b461e92c1af1d4073d04f3459e2c2429a973", 0x38}, {&(0x7f0000001bc0)="a877747b5a3299edbfb5794c0ba381eb6655cc05342cf9c3654f00f2332e24977f1d68519fa42c71b83ff53884e00f3f3f7bc4293a8b1e927214c4f56442f3", 0x3f}, {&(0x7f0000001c00)="841d0e284b9db5bab047235b3732e1", 0xf}, {&(0x7f0000001c40)="c451dc3701bbe026e064c26216b8", 0xe}, {&(0x7f0000001c80)="0520d6dfa71e7796d136cd22a5afcab494c6bdc06e858053149ddea8169d49ea75778874888b2df74c798af7e13d45a68115d179ea1ecd03abe3a90d11199a1c562ac33981678d54d69b1b78bb0bc835e6df11c0a5acf6c3540801136ec61c040b8a00d43dc693c1ead19cdbf644a465a6759868dfc04c2ae808a9406fd4f3b62c109c64130e0e3d272af29405aa0b1828", 0x91}, {&(0x7f0000001d40)="0d91da6bbf117e4f9fb88c2f08b6264f982ab8ce7fa24e27f01345f40a5ab5ab00f3c78994d48ff8cd3112124bcd96cfcdc472f9674214", 0x37}], 0x8, &(0x7f0000001e00)=[{0x40, 0x0, 0xce, "7fde3d0b324128ce85f22e30afb04dd0692a1013bf6093f374c07a096ca494ae7a33454da4bab70284b77e4994"}, {0xb8, 0x112, 0xad2, "5c73b788098597b870165c3997d9977050aa6e0f89601a5d44a0ab8751d2dca2460cd2f27d4d779265d1829d1bd2dff54012f23145e239c57d5628f6486b5e2b120f4ce6c8231e62475658591b6009657ebc390e90111797916e4ee9b05489298e81e39ccdd4404980aad6ca335001121b3861f925dc981c1fd696ccb4292d601690ebdc5c847b63a9ef42c86eea8f2799908732a3986f4a133207ae905b7f24f099b2a9f2d8"}, {0xf0, 0x10c, 0x85, "52046347daa53c16da1580cc3c2a146bb746b0665ba1c9d8dd03734a5cb964fd377170e21f54e57b102586c7fbaa1bd8a3ef448c78e19e8b6ef1fa80b22939c61410258014cfff4b82d1b47b67d4b8717dc392340939306a8c11e2cdbee49c94f8989848c5137c9a50e857294bac35460fb0031ca829e161afd3d2ef8896528d2f2d2aaf2ffef27496d47a52d49bd666f256f3a7f8f25c49e82e161f4a064a89a51e1d9645c412120aec1fd92078ebfe0f4dab6fba2d35da58c36139c811b4bb79301558cb2187c55058e004caec30e83b0ddccfeaaa35b9f3ecf67762aec8a3"}, {0x40, 0x114, 0x7, "a77fab35d39054dc3ba4abde1030371238912fbceb835a9d7a8eb35ae48653f2ca2675c4e7b60a3b0d"}, {0x50, 0x11, 0x800, "22a8df71a3fb614bd5f005965b826a4a3e68f682ee32bf0c72aa18dbad1693d5d4a6239292b468f4e47f784baf2bb31d0050a9e4b479e20011"}, {0xf8, 0x110, 0x9, "05a7c1ae8f4b475df7fe8f06ba24d8c1c61726021fafdb79b7dd1c7adde5f65c806c46b83ca0c242c747b002a0bf32c4dba4e2754c972f4dd6ff0a52e56ad48fe00e7010dfc9ff4334bcc5a67a0111aea3b54eb5da6f4ca1c6b74a7122590e99aec5ccfecee062aa963ddb0e1e86aef67d8dea31f30a636c2ac0fa0afe221a80ef159567015eb03c5754a374be158aace596da448dc7ca4089b0e529f10d9fe4ee523c3d4c5f19e766c1bbbd3ecf202771bbd83404bb518642cc3990fd49b03017a529a72010fb822f547e47e025ff0564ec06a4508e9d5ef026831cfad1700b8ff13946"}, {0x98, 0x107, 0x3, "7d98fbf53196563f390d8630d796947005b3f1bf5ab5f9db27de9adb755e9f50711a4a61498b876d4ebba853b7f304f29549a4e66b0c7d2fd56240b287375281d43ae8f94de543aa92bcc37971e9c8b5cf5844f074e2c0ce68e3c83dd3c2c3622d67c4ea48a17b6bdae111f2a1623b729aa9f769c8cb502b57a3cb12647fb7310a11b656efae60"}], 0x408}, 0x44080) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 2.136552471s ago: executing program 3 (id=3027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x4, 0x2, 0x1, 0xfffffff7, 0xa, 0x6, 0x1}, &(0x7f0000000100)=0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x4, 0x2, 0x1, 0xfffffff7, 0xa, 0x6, 0x1, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xfff9, 0x8001, 0x401, 0x1, r2}, &(0x7f0000000180)=0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='#($\x00', 0x100, &(0x7f0000000200)={@_ha_fsid={[0x0, 0x4]}, {0xfffd, 0xb24, 0x1, 0x5}}, 0x1000, &(0x7f0000000240), &(0x7f0000000280)=0x4}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='#($\x00', 0x100, &(0x7f0000000200)={@_ha_fsid={[0x0, 0x4]}, {0xfffd, 0xb24, 0x1, 0x5}}, 0x1000, &(0x7f0000000240), &(0x7f0000000280)=0x4}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x17, {0xd, 0xfffff800, @l2={'ib', 0x3a, 'wg0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x480d0) read(r0, &(0x7f0000000440)=""/194, 0xc2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x41) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x41) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000006c0)={r2, 0x7, 0x4, 0x1ff, 0x9, 0x6, 0x931c, 0x3d54, {r2, @in6={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}}, 0x2, 0x6d, 0x7ff, 0x5}}, &(0x7f0000000780)=0xb0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000007c0)={"77900512a7050535995b0f6230c07522", 0x0, 0x0, {0x5, 0x2}, {0x5, 0x4}, 0x6, [0x0, 0x6, 0x1, 0x6, 0x2, 0xfffffffffffffffc, 0xffffffffffffd339, 0x3, 0xed3, 0x7ff, 0x49e, 0x3, 0x9, 0x4, 0x4, 0x10000]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000008c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000ac0)={"7b22dcae834ad6a10f1ce480c9d0325e", r7, r8, {0x4, 0x7}, {0x10, 0x8}, 0x7, [0x7, 0x8000000000000001, 0x4, 0x1, 0x3ff, 0xb659, 0x7fff, 0x8, 0x3e, 0x3, 0xb, 0x7769, 0x7fff, 0x8, 0x0, 0x56f0bd4f]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000ac0)={"7b22dcae834ad6a10f1ce480c9d0325e", r7, r8, {0x4, 0x7}, {0x10, 0x8}, 0x7, [0x7, 0x8000000000000001, 0x4, 0x1, 0x3ff, 0xb659, 0x7fff, 0x8, 0x3e, 0x3, 0xb, 0x7769, 0x7fff, 0x8, 0x0, 0x56f0bd4f]}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000bc0)={'vlan1\x00', {0x2, 0x0, @private}}) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000bc0)={'vlan1\x00', {0x2, 0x0, @private}}) ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000c00)) (async) ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000c00)) r9 = accept4(r3, &(0x7f0000000c40), &(0x7f0000000cc0)=0x80, 0x80800) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r3) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000e40)={&(0x7f0000000d00), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, r10, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008810) sendmsg$nl_route(r9, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@bridge_newvlan={0x40, 0x70, 0x400, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x80000001}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x800) tee(r9, r3, 0x3, 0x2) r11 = socket$vsock_stream(0x28, 0x1, 0x0) accept(r11, &(0x7f0000000f80)=@nl=@unspec, &(0x7f0000001000)=0x80) (async) accept(r11, &(0x7f0000000f80)=@nl=@unspec, &(0x7f0000001000)=0x80) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001080)=@o_path={&(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, 0x4000, r11}, 0x18) recvmsg$kcm(r3, &(0x7f0000001380)={&(0x7f00000010c0)=@tipc, 0x80, &(0x7f0000001340)=[{&(0x7f0000001140)=""/228, 0xe4}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f00000012c0)=""/94, 0x5e}], 0x3}, 0x40010120) read$rfkill(r3, &(0x7f00000013c0), 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001480)={0x7, 'macvtap0\x00', {0x1}, 0x6}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001480)={0x7, 'macvtap0\x00', {0x1}, 0x6}) 1.928737833s ago: executing program 1 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.715185934s ago: executing program 0 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000ffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071106a000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NL80211_CMD_SET_CHANNEL(r4, 0x0, 0x4004014) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r6, 0x1, 0x26, 0x0, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x4) getsockopt$inet_opts(r9, 0x0, 0x4, 0x0, &(0x7f0000000180)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000090041bd7000fcdbdf250100000008000800", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x190f}, [@alu={0x4, 0x0, 0x2, 0x4, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe38}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000004c0)='syzkaller\x00', 0xffffffff, 0xec, &(0x7f0000000500)=""/236, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xa, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[{0x4, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x2, 0x7}], 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000008b00), r4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) 1.694104927s ago: executing program 3 (id=3030): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffc, @remote, 0x2}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000002c0)={r4, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={r4, 0x9, 0x1, 0x8, 0x9c, 0x6, 0x1, 0x9, {r2, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0x8000007, 0x4, 0x4, 0xf}}, &(0x7f00000002c0)=0xb0) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.528793141s ago: executing program 4 (id=3031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 1.115163644s ago: executing program 4 (id=3032): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r6, 0x12, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000062", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 843.391931ms ago: executing program 1 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000300626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES16=r0], 0x84}}, 0x0) 585.03234ms ago: executing program 3 (id=3034): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'ip6gre0\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) close(r1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x20, r5, 0x2, 0x0, 0x400, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}}, 0x4000064) 375.348743ms ago: executing program 0 (id=3035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x40000000000f, 0x3, 0xb) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r6, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2}}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f00000001c0)=0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) 375.04285ms ago: executing program 1 (id=3036): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2c", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) 228.863287ms ago: executing program 4 (id=3037): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r1, &(0x7f0000000000)='\\{\x00', 0x111080, &(0x7f0000000040)={@align=0x7, {0x44d, 0x1ff, 0xe, 0x1}}, 0xf9, &(0x7f0000000080), &(0x7f00000000c0)=0x8}, {[0x5, 0xd1, 0x3, 0xfffffffa]}, 0x8, 0xba, &(0x7f0000000200)=""/186}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071104200000000009500000700000000cd1dea8f1da3b2092f99be78892cca045bfe0744ac93c06728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 0s ago: executing program 4 (id=3038): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xb}, {0xffff, 0xffff}, {0x3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) kernel console output (not intermixed with test programs): h. [ 306.633642][T12411] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1752'. [ 306.735186][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 306.785668][T12421] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1756'. [ 306.825372][T12421] netlink: 'syz.3.1756': attribute type 9 has an invalid length. [ 306.879320][T12426] netlink: zone id is out of range [ 306.884678][T12426] netlink: zone id is out of range [ 306.910187][T12426] netlink: zone id is out of range [ 306.937543][T12426] netlink: zone id is out of range [ 306.951393][T12426] netlink: zone id is out of range [ 306.989895][T12426] netlink: zone id is out of range [ 307.017309][T12426] netlink: zone id is out of range [ 307.043914][T12426] netlink: zone id is out of range [ 307.064098][T12426] netlink: zone id is out of range [ 307.420513][T12442] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 307.504637][T12442] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1763'. [ 307.801631][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 307.850527][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 307.902025][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 309.118786][T12491] netlink: 'syz.4.1777': attribute type 1 has an invalid length. [ 309.151347][T12491] netlink: 'syz.4.1777': attribute type 6 has an invalid length. [ 309.381837][T12492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.441720][T12511] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.574026][T12516] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 310.092719][T12534] net_ratelimit: 70 callbacks suppressed [ 310.092739][T12534] openvswitch: netlink: Duplicate or invalid key (type 0). [ 310.207912][T12534] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 310.260331][T12534] __nla_validate_parse: 4 callbacks suppressed [ 310.260351][T12534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1789'. [ 310.427030][T12551] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1794'. [ 310.539636][T12554] netlink: 'syz.2.1795': attribute type 2 has an invalid length. [ 310.563668][T12554] netlink: 'syz.2.1795': attribute type 2 has an invalid length. [ 310.571355][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 310.976786][T12569] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 310.989896][T12567] netlink: 'syz.1.1799': attribute type 11 has an invalid length. [ 311.014938][T12567] netlink: 'syz.1.1799': attribute type 4 has an invalid length. [ 311.037030][T12567] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1799'. [ 311.271300][T12570] veth7: entered allmulticast mode [ 311.296247][T12570] bond6: (slave veth7): Enslaving as an active interface with a down link [ 311.307331][T12571] syzkaller0: entered promiscuous mode [ 311.316991][T12571] syzkaller0: entered allmulticast mode [ 311.334445][T12578] netlink: 'syz.0.1804': attribute type 8 has an invalid length. [ 311.349295][T12578] sch_fq: defrate 0 ignored. [ 311.592505][T12590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.679336][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 311.695492][T12598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.810224][T12598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.929694][T12602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1809'. [ 312.331451][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 312.552580][T12635] FAULT_INJECTION: forcing a failure. [ 312.552580][T12635] name failslab, interval 1, probability 0, space 0, times 0 [ 312.637513][T12635] CPU: 0 UID: 0 PID: 12635 Comm: syz.0.1816 Not tainted syzkaller #0 PREEMPT(full) [ 312.637543][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.637557][T12635] Call Trace: [ 312.637566][T12635] [ 312.637575][T12635] dump_stack_lvl+0xe8/0x150 [ 312.637610][T12635] should_fail_ex+0x40c/0x560 [ 312.637638][T12635] should_failslab+0xa8/0x100 [ 312.637670][T12635] __kmalloc_cache_noprof+0xa8/0x660 [ 312.637696][T12635] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 312.637717][T12635] ? __kmalloc_cache_noprof+0x150/0x660 [ 312.637743][T12635] ? sctp_add_bind_addr+0x8c/0x370 [ 312.637762][T12635] ? sctp_add_bind_addr+0x8c/0x370 [ 312.637789][T12635] sctp_add_bind_addr+0x8c/0x370 [ 312.637816][T12635] sctp_copy_local_addr_list+0x31a/0x4e0 [ 312.637841][T12635] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 312.637863][T12635] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 312.637890][T12635] ? sctp_v4_is_any+0x35/0x60 [ 312.637912][T12635] ? sctp_copy_one_addr+0x93/0x360 [ 312.637937][T12635] sctp_bind_addr_copy+0xb3/0x3c0 [ 312.637960][T12635] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 312.637995][T12635] sctp_connect_new_asoc+0x2ff/0x6b0 [ 312.638026][T12635] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 312.638055][T12635] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 312.638083][T12635] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 312.638109][T12635] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 312.638138][T12635] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 312.638169][T12635] __sctp_connect+0x5cb/0xdc0 [ 312.638210][T12635] ? __pfx___sctp_connect+0x10/0x10 [ 312.638235][T12635] ? sctp_inet_connect+0xa0/0x210 [ 312.638260][T12635] ? __local_bh_enable_ip+0xd0/0x130 [ 312.638289][T12635] sctp_inet_connect+0x12e/0x210 [ 312.638317][T12635] __sys_connect+0x323/0x460 [ 312.638360][T12635] ? __pfx___sys_connect+0x10/0x10 [ 312.638404][T12635] ? __pfx_ksys_write+0x10/0x10 [ 312.638441][T12635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.638465][T12635] __x64_sys_connect+0x7a/0x90 [ 312.638497][T12635] do_syscall_64+0x174/0x580 [ 312.638520][T12635] ? trace_irq_disable+0x3b/0x140 [ 312.638547][T12635] ? clear_bhb_loop+0x70/0xc0 [ 312.638573][T12635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.638594][T12635] RIP: 0033:0x7fa66fd9e0d9 [ 312.638613][T12635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.638632][T12635] RSP: 002b:00007fa670c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 312.638654][T12635] RAX: ffffffffffffffda RBX: 00007fa670026090 RCX: 00007fa66fd9e0d9 [ 312.638673][T12635] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 312.638687][T12635] RBP: 00007fa670c63090 R08: 0000000000000000 R09: 0000000000000000 [ 312.638699][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.638712][T12635] R13: 00007fa670026128 R14: 00007fa670026090 R15: 00007ffd7b09c2a8 [ 312.638745][T12635] [ 313.112171][T12648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1821'. [ 313.305184][T12656] openvswitch: netlink: Duplicate or invalid key (type 0). [ 313.388571][T12656] openvswitch: netlink: Duplicate or invalid key (type 0). [ 313.782423][T12669] rdma_rxe: rxe_newlink: failed to add lo [ 314.195359][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1832'. [ 314.316177][T12685] IPv6: NLM_F_CREATE should be specified when creating new route [ 314.353375][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 314.426329][T12685] team_slave_1: Caught tx_queue_len zero misconfig [ 314.752027][T12697] FAULT_INJECTION: forcing a failure. [ 314.752027][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 314.825426][T12697] CPU: 0 UID: 0 PID: 12697 Comm: syz.2.1835 Not tainted syzkaller #0 PREEMPT(full) [ 314.825457][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.825470][T12697] Call Trace: [ 314.825479][T12697] [ 314.825488][T12697] dump_stack_lvl+0xe8/0x150 [ 314.825524][T12697] should_fail_ex+0x40c/0x560 [ 314.825554][T12697] should_failslab+0xa8/0x100 [ 314.825588][T12697] __kmalloc_cache_noprof+0xa8/0x660 [ 314.825615][T12697] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 314.825639][T12697] ? __kmalloc_cache_noprof+0x150/0x660 [ 314.825665][T12697] ? sctp_add_bind_addr+0x8c/0x370 [ 314.825685][T12697] ? sctp_add_bind_addr+0x8c/0x370 [ 314.825715][T12697] sctp_add_bind_addr+0x8c/0x370 [ 314.825742][T12697] sctp_copy_local_addr_list+0x31a/0x4e0 [ 314.825768][T12697] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 314.825802][T12697] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 314.825830][T12697] ? sctp_v4_is_any+0x35/0x60 [ 314.825854][T12697] ? sctp_copy_one_addr+0x93/0x360 [ 314.825880][T12697] sctp_bind_addr_copy+0xb3/0x3c0 [ 314.825906][T12697] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 314.825941][T12697] sctp_connect_new_asoc+0x2ff/0x6b0 [ 314.825981][T12697] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 314.826012][T12697] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 314.826040][T12697] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 314.826066][T12697] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 314.826096][T12697] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 314.826128][T12697] __sctp_connect+0x5cb/0xdc0 [ 314.826167][T12697] ? __pfx___sctp_connect+0x10/0x10 [ 314.826191][T12697] ? sctp_inet_connect+0xa0/0x210 [ 314.826217][T12697] ? __local_bh_enable_ip+0xd0/0x130 [ 314.826247][T12697] sctp_inet_connect+0x12e/0x210 [ 314.826277][T12697] __sys_connect+0x323/0x460 [ 314.826312][T12697] ? __pfx___sys_connect+0x10/0x10 [ 314.826357][T12697] ? __pfx_ksys_write+0x10/0x10 [ 314.826396][T12697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.826421][T12697] __x64_sys_connect+0x7a/0x90 [ 314.826456][T12697] do_syscall_64+0x174/0x580 [ 314.826483][T12697] ? trace_irq_disable+0x3b/0x140 [ 314.826510][T12697] ? clear_bhb_loop+0x70/0xc0 [ 314.826538][T12697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.826560][T12697] RIP: 0033:0x7fe60659e0d9 [ 314.826581][T12697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.826599][T12697] RSP: 002b:00007fe6073c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 314.826623][T12697] RAX: ffffffffffffffda RBX: 00007fe606826090 RCX: 00007fe60659e0d9 [ 314.826639][T12697] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 314.826653][T12697] RBP: 00007fe6073c2090 R08: 0000000000000000 R09: 0000000000000000 [ 314.826666][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.826679][T12697] R13: 00007fe606826128 R14: 00007fe606826090 R15: 00007ffdb0fe4098 [ 314.826715][T12697] [ 315.145295][T12703] ip6gre1: entered promiscuous mode [ 315.151078][T12703] ip6gre1: entered allmulticast mode [ 315.264252][T12711] tipc: MTU too low for tipc bearer [ 315.309146][T12711] veth5: entered allmulticast mode [ 315.338214][T12709] macsec0: entered promiscuous mode [ 315.748165][T12723] tipc: Enabling of bearer rejected, already enabled [ 315.803160][T12726] __nla_validate_parse: 2 callbacks suppressed [ 315.803179][T12726] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1846'. [ 315.853133][T12726] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.163529][T12699] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1837'. [ 316.196772][T12699] xt_policy: neither incoming nor outgoing policy selected [ 317.065426][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.240625][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 317.255121][T12757] FAULT_INJECTION: forcing a failure. [ 317.255121][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 317.293224][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'. [ 317.302785][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.2.1854 Not tainted syzkaller #0 PREEMPT(full) [ 317.302815][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.302828][T12757] Call Trace: [ 317.302836][T12757] [ 317.302845][T12757] dump_stack_lvl+0xe8/0x150 [ 317.302880][T12757] should_fail_ex+0x40c/0x560 [ 317.302908][T12757] should_failslab+0xa8/0x100 [ 317.302940][T12757] __kmalloc_cache_noprof+0xa8/0x660 [ 317.302966][T12757] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 317.302987][T12757] ? __kmalloc_cache_noprof+0x150/0x660 [ 317.303012][T12757] ? sctp_add_bind_addr+0x8c/0x370 [ 317.303031][T12757] ? sctp_add_bind_addr+0x8c/0x370 [ 317.303060][T12757] sctp_add_bind_addr+0x8c/0x370 [ 317.303086][T12757] sctp_copy_local_addr_list+0x31a/0x4e0 [ 317.303111][T12757] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 317.303134][T12757] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 317.303162][T12757] ? sctp_v4_is_any+0x35/0x60 [ 317.303185][T12757] ? sctp_copy_one_addr+0x93/0x360 [ 317.303212][T12757] sctp_bind_addr_copy+0xb3/0x3c0 [ 317.303236][T12757] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 317.303272][T12757] sctp_connect_new_asoc+0x2ff/0x6b0 [ 317.303315][T12757] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 317.303342][T12757] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 317.303367][T12757] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 317.303391][T12757] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 317.303418][T12757] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 317.303446][T12757] __sctp_connect+0x5cb/0xdc0 [ 317.303484][T12757] ? __pfx___sctp_connect+0x10/0x10 [ 317.303506][T12757] ? sctp_inet_connect+0xa0/0x210 [ 317.303531][T12757] ? __local_bh_enable_ip+0xd0/0x130 [ 317.303558][T12757] sctp_inet_connect+0x12e/0x210 [ 317.303585][T12757] __sys_connect+0x323/0x460 [ 317.303616][T12757] ? __pfx___sys_connect+0x10/0x10 [ 317.303659][T12757] ? __pfx_ksys_write+0x10/0x10 [ 317.303695][T12757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.303717][T12757] __x64_sys_connect+0x7a/0x90 [ 317.303748][T12757] do_syscall_64+0x174/0x580 [ 317.303780][T12757] ? trace_irq_disable+0x3b/0x140 [ 317.303810][T12757] ? clear_bhb_loop+0x70/0xc0 [ 317.303835][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.303855][T12757] RIP: 0033:0x7fe60659e0d9 [ 317.303874][T12757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.303891][T12757] RSP: 002b:00007fe6073c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 317.303912][T12757] RAX: ffffffffffffffda RBX: 00007fe606826090 RCX: 00007fe60659e0d9 [ 317.303927][T12757] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 317.303939][T12757] RBP: 00007fe6073c2090 R08: 0000000000000000 R09: 0000000000000000 [ 317.303952][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.303963][T12757] R13: 00007fe606826128 R14: 00007fe606826090 R15: 00007ffdb0fe4098 [ 317.303997][T12757] [ 317.529136][T12764] netlink: 'syz.0.1856': attribute type 5 has an invalid length. [ 318.020465][T12773] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1859'. [ 318.105031][T12786] ip_tables: iptables: counters copy to user failed while replacing table [ 318.592906][T12806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1870'. [ 319.184130][T12825] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1874'. [ 319.381736][T12836] tunl0: Caught tx_queue_len zero misconfig [ 320.074169][T12873] netlink: 'syz.1.1888': attribute type 7 has an invalid length. [ 320.116446][T12873] netlink: 'syz.1.1888': attribute type 7 has an invalid length. [ 320.133440][T12876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 320.143928][T12876] openvswitch: netlink: Flow key attr not present in new flow. [ 320.494066][T12888] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 320.573563][T12888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1893'. [ 320.636734][T12894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1893'. [ 320.878811][T12902] vlan0: Caught tx_queue_len zero misconfig [ 320.962973][T12907] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1900'. [ 321.162035][T12914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1904'. [ 321.240633][T12916] netlink: 'syz.3.1903': attribute type 3 has an invalid length. [ 321.283007][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 321.366659][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1905'. [ 321.408587][T12918] netlink: 'syz.4.1905': attribute type 3 has an invalid length. [ 321.466648][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 321.994484][T12945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1913'. [ 322.044962][T12948] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.1914'. [ 322.198218][T12952] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 322.250628][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 322.381229][T12957] gre0: Caught tx_queue_len zero misconfig [ 322.436576][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 322.706375][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'. [ 322.826328][T11041] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 324.043956][T13014] netlink: 'syz.3.1936': attribute type 2 has an invalid length. [ 324.075984][T13017] TCP: TCP_TX_DELAY enabled [ 324.140498][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.350332][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.423085][T13027] bridge6: entered promiscuous mode [ 324.441519][T13027] bridge6: entered allmulticast mode [ 324.464266][T13033] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 324.556797][T13031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.936575][T13054] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 325.001392][T13054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.016557][T13057] FAULT_INJECTION: forcing a failure. [ 325.016557][T13057] name failslab, interval 1, probability 0, space 0, times 0 [ 325.057216][T13057] CPU: 1 UID: 0 PID: 13057 Comm: syz.0.1946 Not tainted syzkaller #0 PREEMPT(full) [ 325.057244][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.057256][T13057] Call Trace: [ 325.057263][T13057] [ 325.057271][T13057] dump_stack_lvl+0xe8/0x150 [ 325.057304][T13057] should_fail_ex+0x40c/0x560 [ 325.057331][T13057] should_failslab+0xa8/0x100 [ 325.057356][T13057] __kmalloc_cache_noprof+0xa8/0x660 [ 325.057375][T13057] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 325.057393][T13057] ? __kmalloc_cache_noprof+0x150/0x660 [ 325.057412][T13057] ? sctp_add_bind_addr+0x8c/0x370 [ 325.057428][T13057] ? sctp_add_bind_addr+0x8c/0x370 [ 325.057452][T13057] sctp_add_bind_addr+0x8c/0x370 [ 325.057474][T13057] sctp_copy_local_addr_list+0x31a/0x4e0 [ 325.057495][T13057] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 325.057526][T13057] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 325.057552][T13057] ? sctp_v4_is_any+0x35/0x60 [ 325.057574][T13057] ? sctp_copy_one_addr+0x93/0x360 [ 325.057599][T13057] sctp_bind_addr_copy+0xb3/0x3c0 [ 325.057621][T13057] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 325.057655][T13057] sctp_connect_new_asoc+0x2ff/0x6b0 [ 325.057686][T13057] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 325.057714][T13057] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 325.057740][T13057] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 325.057764][T13057] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 325.057792][T13057] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 325.057822][T13057] __sctp_connect+0x5cb/0xdc0 [ 325.057863][T13057] ? __pfx___sctp_connect+0x10/0x10 [ 325.057886][T13057] ? sctp_inet_connect+0xa0/0x210 [ 325.057912][T13057] ? __local_bh_enable_ip+0xd0/0x130 [ 325.057941][T13057] sctp_inet_connect+0x12e/0x210 [ 325.057968][T13057] __sys_connect+0x323/0x460 [ 325.058001][T13057] ? __pfx___sys_connect+0x10/0x10 [ 325.058044][T13057] ? __pfx_ksys_write+0x10/0x10 [ 325.058082][T13057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.058106][T13057] __x64_sys_connect+0x7a/0x90 [ 325.058137][T13057] do_syscall_64+0x174/0x580 [ 325.058162][T13057] ? trace_irq_disable+0x3b/0x140 [ 325.058187][T13057] ? clear_bhb_loop+0x70/0xc0 [ 325.058214][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.058234][T13057] RIP: 0033:0x7fa66fd9e0d9 [ 325.058253][T13057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.058270][T13057] RSP: 002b:00007fa670c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 325.058292][T13057] RAX: ffffffffffffffda RBX: 00007fa670026090 RCX: 00007fa66fd9e0d9 [ 325.058307][T13057] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 325.058332][T13057] RBP: 00007fa670c63090 R08: 0000000000000000 R09: 0000000000000000 [ 325.058344][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.058356][T13057] R13: 00007fa670026128 R14: 00007fa670026090 R15: 00007ffd7b09c2a8 [ 325.058389][T13057] [ 325.461058][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.885192][T13075] Cannot find set identified by id 65534 to match [ 325.885745][T13077] Cannot find set identified by id 65534 to match [ 326.001338][T13080] netlink: 'syz.0.1953': attribute type 4 has an invalid length. [ 326.029818][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.040071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.078823][T13080] __nla_validate_parse: 4 callbacks suppressed [ 326.078843][T13080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1953'. [ 326.256483][T13080] .`: renamed from bond0 [ 326.419771][T13093] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 326.630202][T11041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.662534][ T47] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 326.766696][T13098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.890987][T13116] FAULT_INJECTION: forcing a failure. [ 326.890987][T13116] name failslab, interval 1, probability 0, space 0, times 0 [ 326.958199][T13116] CPU: 1 UID: 0 PID: 13116 Comm: syz.2.1963 Not tainted syzkaller #0 PREEMPT(full) [ 326.958228][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.958242][T13116] Call Trace: [ 326.958250][T13116] [ 326.958259][T13116] dump_stack_lvl+0xe8/0x150 [ 326.958295][T13116] should_fail_ex+0x40c/0x560 [ 326.958323][T13116] should_failslab+0xa8/0x100 [ 326.958364][T13116] __kmalloc_cache_noprof+0xa8/0x660 [ 326.958392][T13116] ? __kmalloc_cache_noprof+0x150/0x660 [ 326.958417][T13116] ? sctp_add_bind_addr+0x8c/0x370 [ 326.958437][T13116] ? sctp_add_bind_addr+0x8c/0x370 [ 326.958465][T13116] sctp_add_bind_addr+0x8c/0x370 [ 326.958492][T13116] sctp_copy_local_addr_list+0x31a/0x4e0 [ 326.958517][T13116] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 326.958541][T13116] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 326.958571][T13116] ? sctp_v4_is_any+0x35/0x60 [ 326.958594][T13116] ? sctp_copy_one_addr+0x93/0x360 [ 326.958620][T13116] sctp_bind_addr_copy+0xb3/0x3c0 [ 326.958643][T13116] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 326.958678][T13116] sctp_connect_new_asoc+0x2ff/0x6b0 [ 326.958710][T13116] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 326.958739][T13116] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 326.958766][T13116] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 326.958791][T13116] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 326.958820][T13116] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 326.958850][T13116] __sctp_connect+0x5cb/0xdc0 [ 326.958892][T13116] ? __pfx___sctp_connect+0x10/0x10 [ 326.958916][T13116] ? sctp_inet_connect+0xa0/0x210 [ 326.958943][T13116] ? __local_bh_enable_ip+0xd0/0x130 [ 326.958972][T13116] sctp_inet_connect+0x12e/0x210 [ 326.958999][T13116] __sys_connect+0x323/0x460 [ 326.959034][T13116] ? __pfx___sys_connect+0x10/0x10 [ 326.959078][T13116] ? __pfx_ksys_write+0x10/0x10 [ 326.959116][T13116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.959139][T13116] __x64_sys_connect+0x7a/0x90 [ 326.959170][T13116] do_syscall_64+0x174/0x580 [ 326.959195][T13116] ? trace_irq_disable+0x3b/0x140 [ 326.959220][T13116] ? clear_bhb_loop+0x70/0xc0 [ 326.959246][T13116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.959268][T13116] RIP: 0033:0x7fe60659e0d9 [ 326.959288][T13116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.959306][T13116] RSP: 002b:00007fe6073c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 326.959328][T13116] RAX: ffffffffffffffda RBX: 00007fe606826090 RCX: 00007fe60659e0d9 [ 326.959352][T13116] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 326.959365][T13116] RBP: 00007fe6073c2090 R08: 0000000000000000 R09: 0000000000000000 [ 326.959379][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.959391][T13116] R13: 00007fe606826128 R14: 00007fe606826090 R15: 00007ffdb0fe4098 [ 326.959426][T13116] [ 327.739061][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.032725][T13134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1968'. [ 328.318272][T13143] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1969'. [ 328.462857][T13146] sctp: [Deprecated]: syz.0.1970 (pid 13146) Use of int in maxseg socket option. [ 328.462857][T13146] Use struct sctp_assoc_value instead [ 328.483332][T13147] netlink: 'syz.1.1972': attribute type 39 has an invalid length. [ 329.210468][T11036] net_ratelimit: 1 callbacks suppressed [ 329.210489][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.224718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.372020][T13173] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 329.488443][T13177] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 329.505350][T13177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.882417][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 329.935479][T13196] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 329.949310][T13194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.987303][T13194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.002452][T13194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.014422][T13194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.185577][T13207] bond0: (slave bridge8): making interface the new active one [ 330.210447][T13207] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 330.223951][T11040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.397412][T11040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.498502][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.819810][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.913464][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1994'. [ 330.934617][T13222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 331.113444][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.143473][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 331.191489][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.198769][T13229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.210350][T13229] bridge0: entered promiscuous mode [ 331.218642][T13229] bridge0: entered allmulticast mode [ 331.637776][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.640897][T13248] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 331.681520][T13248] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2001'. [ 331.781572][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.790302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.834615][T13251] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2002'. [ 331.986266][T13251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.997084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.060907][T13234] netlink: 'syz.2.1996': attribute type 3 has an invalid length. [ 332.089002][T13234] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 332.122261][T13234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1996'. [ 332.160741][T13233] netlink: 'syz.2.1996': attribute type 3 has an invalid length. [ 332.189157][T13233] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 332.215430][T13233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1996'. [ 332.550003][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2006'. [ 332.886899][T13268] batadv0: Caught tx_queue_len zero misconfig [ 333.221338][T13277] netlink: 'syz.4.2009': attribute type 1 has an invalid length. [ 333.250554][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2009'. [ 333.292443][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 333.430917][T13283] xt_TCPMSS: Only works on TCP SYN packets [ 334.026915][T13308] xt_socket: unknown flags 0xe4 [ 334.244817][T13322] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 334.266054][T13322] bond0 (unregistering): Released all slaves [ 334.335129][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 334.386584][T13318] syzkaller0: entered promiscuous mode [ 334.411115][T13318] syzkaller0: entered allmulticast mode [ 334.416997][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'. [ 334.544932][T13340] netlink: 'syz.0.2024': attribute type 1 has an invalid length. [ 334.567046][T13333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.592827][T13337] bond7: (slave batadv0): Opening slave failed [ 334.751915][T13342] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 334.906930][T13344] veth9: entered promiscuous mode [ 334.931890][T13344] bond0: (slave veth9): Enslaving as a backup interface with a down link [ 334.971814][T11041] net_ratelimit: 7 callbacks suppressed [ 334.971832][T11041] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 334.989601][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.004157][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.141066][T11041] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 336.118685][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.508502][T13374] __nla_validate_parse: 1 callbacks suppressed [ 336.508522][T13374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2034'. [ 336.603961][T13376] netlink: 'syz.1.2035': attribute type 4 has an invalid length. [ 336.904437][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.915407][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.923798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.076047][T13311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.230344][T11041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.694598][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 337.874612][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 337.925039][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 338.056474][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 338.061938][T13420] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.155035][T13423] 8021q: adding VLAN 0 to HW filter on device bond8 [ 338.351087][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.383030][T13423] bond8: (slave vti0): refused to change device type [ 338.402150][T13436] xt_ecn: cannot match TCP bits for non-tcp packets [ 338.503459][T13443] netlink: 'syz.3.2055': attribute type 2 has an invalid length. [ 338.763290][T13452] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 338.795230][T13450] Cannot find map_set index 2 as target [ 338.816923][T13452] team0: Device gtp2 is of different type [ 339.168577][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'. [ 339.182461][T13466] SET target dimension over the limit! [ 339.195571][T13465] netlink: 'syz.0.2063': attribute type 12 has an invalid length. [ 339.206103][T13464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.344241][T13464] gtp1: entered promiscuous mode [ 339.353142][T13464] gtp1: entered allmulticast mode [ 339.553375][T13478] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 339.596433][T13478] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 339.642406][T13482] FAULT_INJECTION: forcing a failure. [ 339.642406][T13482] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 339.708002][T13482] CPU: 0 UID: 0 PID: 13482 Comm: syz.0.2066 Not tainted syzkaller #0 PREEMPT(full) [ 339.708029][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.708042][T13482] Call Trace: [ 339.708050][T13482] [ 339.708059][T13482] dump_stack_lvl+0xe8/0x150 [ 339.708092][T13482] should_fail_ex+0x40c/0x560 [ 339.708118][T13482] _copy_from_user+0x2d/0xb0 [ 339.708146][T13482] ___sys_sendmsg+0x1c6/0x360 [ 339.708166][T13482] ? __lock_acquire+0x683/0x2cf0 [ 339.708204][T13482] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.708260][T13482] ? __fget_files+0x2a/0x420 [ 339.708302][T13482] ? __fget_files+0x3a2/0x420 [ 339.708340][T13482] __x64_sys_sendmsg+0x1b1/0x290 [ 339.708364][T13482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.708405][T13482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.708428][T13482] do_syscall_64+0x174/0x580 [ 339.708453][T13482] ? trace_irq_disable+0x3b/0x140 [ 339.708479][T13482] ? clear_bhb_loop+0x70/0xc0 [ 339.708505][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.708525][T13482] RIP: 0033:0x7fa66fd9e0d9 [ 339.708544][T13482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.708564][T13482] RSP: 002b:00007fa670c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.708586][T13482] RAX: ffffffffffffffda RBX: 00007fa670026090 RCX: 00007fa66fd9e0d9 [ 339.708601][T13482] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 339.708614][T13482] RBP: 00007fa670c63090 R08: 0000000000000000 R09: 0000000000000000 [ 339.708627][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.708639][T13482] R13: 00007fa670026128 R14: 00007fa670026090 R15: 00007ffd7b09c2a8 [ 339.708671][T13482] [ 339.963840][T13484] syzkaller0: entered promiscuous mode [ 339.969407][T13484] syzkaller0: entered allmulticast mode [ 339.980699][T13484] netlink: 'syz.1.2068': attribute type 3 has an invalid length. [ 339.988546][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 340.001930][ T5797] net_ratelimit: 1 callbacks suppressed [ 340.001947][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.241993][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 340.274491][T13486] netlink: 'syz.2.2069': attribute type 7 has an invalid length. [ 340.291082][T13486] netlink: 'syz.2.2069': attribute type 8 has an invalid length. [ 340.311334][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 340.406173][T13498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2073'. [ 340.681599][T13509] netlink: 'syz.2.2075': attribute type 19 has an invalid length. [ 340.789846][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.852345][T13514] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 341.175368][T13524] netlink: 'syz.0.2080': attribute type 12 has an invalid length. [ 341.208955][T13524] netlink: 'syz.0.2080': attribute type 11 has an invalid length. [ 341.355460][T13530] syzkaller0: entered promiscuous mode [ 341.372979][T13530] syzkaller0: entered allmulticast mode [ 341.450995][T13538] FAULT_INJECTION: forcing a failure. [ 341.450995][T13538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.503508][T13538] CPU: 0 UID: 0 PID: 13538 Comm: syz.1.2081 Not tainted syzkaller #0 PREEMPT(full) [ 341.503541][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.503554][T13538] Call Trace: [ 341.503563][T13538] [ 341.503572][T13538] dump_stack_lvl+0xe8/0x150 [ 341.503608][T13538] should_fail_ex+0x40c/0x560 [ 341.503637][T13538] _copy_from_user+0x2d/0xb0 [ 341.503668][T13538] __copy_msghdr+0x390/0x590 [ 341.503696][T13538] ___sys_sendmsg+0x213/0x360 [ 341.503716][T13538] ? __lock_acquire+0x683/0x2cf0 [ 341.503750][T13538] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.503810][T13538] ? __fget_files+0x2a/0x420 [ 341.503838][T13538] ? __fget_files+0x3a2/0x420 [ 341.503876][T13538] __x64_sys_sendmsg+0x1b1/0x290 [ 341.503902][T13538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.503945][T13538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.503969][T13538] do_syscall_64+0x174/0x580 [ 341.503994][T13538] ? trace_irq_disable+0x3b/0x140 [ 341.504021][T13538] ? clear_bhb_loop+0x70/0xc0 [ 341.504049][T13538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.504070][T13538] RIP: 0033:0x7f0c0739e0d9 [ 341.504098][T13538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.504117][T13538] RSP: 002b:00007f0c08223028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.504140][T13538] RAX: ffffffffffffffda RBX: 00007f0c07626180 RCX: 00007f0c0739e0d9 [ 341.504156][T13538] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 341.504170][T13538] RBP: 00007f0c08223090 R08: 0000000000000000 R09: 0000000000000000 [ 341.504186][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.504200][T13538] R13: 00007f0c07626218 R14: 00007f0c07626180 R15: 00007ffd0661dc38 [ 341.504235][T13538] [ 341.795674][T13543] bond0: Error: Cannot enslave bond to itself. [ 341.855865][T13547] __nla_validate_parse: 2 callbacks suppressed [ 341.855886][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 341.872663][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2086'. [ 342.023278][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.032380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.048475][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.297941][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 342.352766][T13560] 8021q: VLANs not supported on tunl0 [ 342.665798][T13572] validate_nla: 2 callbacks suppressed [ 342.665819][T13572] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 342.684068][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.736118][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.775912][T13581] FAULT_INJECTION: forcing a failure. [ 342.775912][T13581] name failslab, interval 1, probability 0, space 0, times 0 [ 342.790034][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.3.2094 Not tainted syzkaller #0 PREEMPT(full) [ 342.790061][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.790073][T13581] Call Trace: [ 342.790081][T13581] [ 342.790094][T13581] dump_stack_lvl+0xe8/0x150 [ 342.790129][T13581] should_fail_ex+0x40c/0x560 [ 342.790156][T13581] should_failslab+0xa8/0x100 [ 342.790193][T13581] __kmalloc_cache_noprof+0xa8/0x660 [ 342.790218][T13581] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 342.790239][T13581] ? __kmalloc_cache_noprof+0x150/0x660 [ 342.790264][T13581] ? sctp_add_bind_addr+0x8c/0x370 [ 342.790284][T13581] ? sctp_add_bind_addr+0x8c/0x370 [ 342.790312][T13581] sctp_add_bind_addr+0x8c/0x370 [ 342.790338][T13581] sctp_copy_local_addr_list+0x31a/0x4e0 [ 342.790363][T13581] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 342.790387][T13581] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 342.790415][T13581] ? sctp_v4_is_any+0x35/0x60 [ 342.790438][T13581] ? sctp_copy_one_addr+0x93/0x360 [ 342.790464][T13581] sctp_bind_addr_copy+0xb3/0x3c0 [ 342.790489][T13581] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 342.790525][T13581] sctp_connect_new_asoc+0x2ff/0x6b0 [ 342.790557][T13581] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 342.790585][T13581] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.790614][T13581] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.790640][T13581] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.790670][T13581] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 342.790701][T13581] __sctp_connect+0x5cb/0xdc0 [ 342.790743][T13581] ? __pfx___sctp_connect+0x10/0x10 [ 342.790767][T13581] ? sctp_inet_connect+0xa0/0x210 [ 342.790792][T13581] ? __local_bh_enable_ip+0xd0/0x130 [ 342.790820][T13581] sctp_inet_connect+0x12e/0x210 [ 342.790847][T13581] __sys_connect+0x323/0x460 [ 342.790878][T13581] ? __pfx___sys_connect+0x10/0x10 [ 342.790921][T13581] ? __pfx_ksys_write+0x10/0x10 [ 342.790958][T13581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.790988][T13581] __x64_sys_connect+0x7a/0x90 [ 342.791019][T13581] do_syscall_64+0x174/0x580 [ 342.791044][T13581] ? trace_irq_disable+0x3b/0x140 [ 342.791071][T13581] ? clear_bhb_loop+0x70/0xc0 [ 342.791098][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.791121][T13581] RIP: 0033:0x7f00ddb9e0d9 [ 342.791142][T13581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.791160][T13581] RSP: 002b:00007f00dea77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 342.791183][T13581] RAX: ffffffffffffffda RBX: 00007f00dde26090 RCX: 00007f00ddb9e0d9 [ 342.791199][T13581] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 342.791212][T13581] RBP: 00007f00dea77090 R08: 0000000000000000 R09: 0000000000000000 [ 342.791224][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.791235][T13581] R13: 00007f00dde26128 R14: 00007f00dde26090 R15: 00007ffd8b59c038 [ 342.791269][T13581] [ 342.837581][T13572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 343.071246][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.115492][T13557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.265057][T13577] bond6: (slave gretap2): making interface the new active one [ 343.279156][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.303961][T13577] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 343.473350][T13588] tipc: Started in network mode [ 343.484761][T13588] tipc: Node identity ac141441, cluster identity 4711 [ 343.541880][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.563640][T13588] tipc: Enabled bearer , priority 10 [ 343.886030][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 343.966892][T13614] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2104'. [ 344.461483][T13630] FAULT_INJECTION: forcing a failure. [ 344.461483][T13630] name failslab, interval 1, probability 0, space 0, times 0 [ 344.518032][T13630] CPU: 0 UID: 0 PID: 13630 Comm: syz.3.2111 Not tainted syzkaller #0 PREEMPT(full) [ 344.518063][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.518077][T13630] Call Trace: [ 344.518085][T13630] [ 344.518095][T13630] dump_stack_lvl+0xe8/0x150 [ 344.518132][T13630] should_fail_ex+0x40c/0x560 [ 344.518161][T13630] should_failslab+0xa8/0x100 [ 344.518195][T13630] __kmalloc_cache_noprof+0xa8/0x660 [ 344.518221][T13630] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 344.518244][T13630] ? __kmalloc_cache_noprof+0x150/0x660 [ 344.518270][T13630] ? sctp_add_bind_addr+0x8c/0x370 [ 344.518290][T13630] ? sctp_add_bind_addr+0x8c/0x370 [ 344.518320][T13630] sctp_add_bind_addr+0x8c/0x370 [ 344.518347][T13630] sctp_copy_local_addr_list+0x31a/0x4e0 [ 344.518374][T13630] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 344.518398][T13630] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 344.518427][T13630] ? sctp_v4_is_any+0x35/0x60 [ 344.518450][T13630] ? sctp_copy_one_addr+0x93/0x360 [ 344.518476][T13630] sctp_bind_addr_copy+0xb3/0x3c0 [ 344.518501][T13630] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 344.518538][T13630] sctp_connect_new_asoc+0x2ff/0x6b0 [ 344.518569][T13630] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 344.518599][T13630] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 344.518627][T13630] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 344.518654][T13630] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 344.518684][T13630] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 344.518721][T13630] __sctp_connect+0x5cb/0xdc0 [ 344.518789][T13630] ? __pfx___sctp_connect+0x10/0x10 [ 344.518815][T13630] ? sctp_inet_connect+0xa0/0x210 [ 344.518845][T13630] ? __local_bh_enable_ip+0xd0/0x130 [ 344.518875][T13630] sctp_inet_connect+0x12e/0x210 [ 344.518904][T13630] __sys_connect+0x323/0x460 [ 344.518939][T13630] ? __pfx___sys_connect+0x10/0x10 [ 344.518984][T13630] ? __pfx_ksys_write+0x10/0x10 [ 344.519025][T13630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.519051][T13630] __x64_sys_connect+0x7a/0x90 [ 344.519084][T13630] do_syscall_64+0x174/0x580 [ 344.519111][T13630] ? trace_irq_disable+0x3b/0x140 [ 344.519139][T13630] ? clear_bhb_loop+0x70/0xc0 [ 344.519168][T13630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.519190][T13630] RIP: 0033:0x7f00ddb9e0d9 [ 344.519211][T13630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.519231][T13630] RSP: 002b:00007f00dea77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 344.519254][T13630] RAX: ffffffffffffffda RBX: 00007f00dde26090 RCX: 00007f00ddb9e0d9 [ 344.519269][T13630] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 344.519282][T13630] RBP: 00007f00dea77090 R08: 0000000000000000 R09: 0000000000000000 [ 344.519296][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.519310][T13630] R13: 00007f00dde26128 R14: 00007f00dde26090 R15: 00007ffd8b59c038 [ 344.519347][T13630] [ 344.942188][ T10] tipc: Node number set to 2886997057 [ 344.968951][T13639] pimreg: entered allmulticast mode [ 345.248673][T13650] syzkaller0: left promiscuous mode [ 345.273851][T13650] syzkaller0: left allmulticast mode [ 345.861280][ T47] net_ratelimit: 2 callbacks suppressed [ 345.861301][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.922951][T13688] xt_ecn: cannot match TCP bits for non-tcp packets [ 345.959983][T13682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2124'. [ 346.100090][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.293594][T13704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.303667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.366108][T13704] FAULT_INJECTION: forcing a failure. [ 346.366108][T13704] name failslab, interval 1, probability 0, space 0, times 0 [ 346.385723][T13704] CPU: 0 UID: 0 PID: 13704 Comm: syz.4.2129 Not tainted syzkaller #0 PREEMPT(full) [ 346.385753][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.385766][T13704] Call Trace: [ 346.385775][T13704] [ 346.385784][T13704] dump_stack_lvl+0xe8/0x150 [ 346.385818][T13704] should_fail_ex+0x40c/0x560 [ 346.385846][T13704] should_failslab+0xa8/0x100 [ 346.385881][T13704] __kmalloc_cache_noprof+0xa8/0x660 [ 346.385907][T13704] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 346.385928][T13704] ? __kmalloc_cache_noprof+0x150/0x660 [ 346.385954][T13704] ? sctp_add_bind_addr+0x8c/0x370 [ 346.385973][T13704] ? sctp_add_bind_addr+0x8c/0x370 [ 346.386003][T13704] sctp_add_bind_addr+0x8c/0x370 [ 346.386031][T13704] sctp_copy_local_addr_list+0x31a/0x4e0 [ 346.386056][T13704] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 346.386080][T13704] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 346.386116][T13704] ? sctp_v4_is_any+0x35/0x60 [ 346.386139][T13704] ? sctp_copy_one_addr+0x93/0x360 [ 346.386165][T13704] sctp_bind_addr_copy+0xb3/0x3c0 [ 346.386189][T13704] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 346.386225][T13704] sctp_connect_new_asoc+0x2ff/0x6b0 [ 346.386257][T13704] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 346.386287][T13704] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 346.386315][T13704] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 346.386341][T13704] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 346.386371][T13704] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 346.386403][T13704] __sctp_connect+0x5cb/0xdc0 [ 346.386442][T13704] ? __pfx___sctp_connect+0x10/0x10 [ 346.386471][T13704] ? sctp_inet_connect+0xa0/0x210 [ 346.386497][T13704] ? __local_bh_enable_ip+0xd0/0x130 [ 346.386526][T13704] sctp_inet_connect+0x12e/0x210 [ 346.386555][T13704] __sys_connect+0x323/0x460 [ 346.386590][T13704] ? __pfx___sys_connect+0x10/0x10 [ 346.386635][T13704] ? __pfx_ksys_write+0x10/0x10 [ 346.386672][T13704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.386700][T13704] __x64_sys_connect+0x7a/0x90 [ 346.386732][T13704] do_syscall_64+0x174/0x580 [ 346.386758][T13704] ? trace_irq_disable+0x3b/0x140 [ 346.386785][T13704] ? clear_bhb_loop+0x70/0xc0 [ 346.386812][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.386834][T13704] RIP: 0033:0x7f634e79e0d9 [ 346.386855][T13704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.386874][T13704] RSP: 002b:00007f634f67a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 346.386897][T13704] RAX: ffffffffffffffda RBX: 00007f634ea25fa0 RCX: 00007f634e79e0d9 [ 346.386913][T13704] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 346.386926][T13704] RBP: 00007f634f67a090 R08: 0000000000000000 R09: 0000000000000000 [ 346.386939][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.386952][T13704] R13: 00007f634ea26038 R14: 00007f634ea25fa0 R15: 00007fff21761cc8 [ 346.386988][T13704] [ 346.729445][ T29] audit: type=1800 audit(1786106417.130:8): pid=13703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2128" name=0A dev="tmpfs" ino=2001 res=0 errno=0 [ 346.827410][T13709] syzkaller0: entered promiscuous mode [ 346.865864][T13709] syzkaller0: entered allmulticast mode [ 347.288814][T10257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.374998][T13731] veth0: entered promiscuous mode [ 347.389473][T13727] veth0: left promiscuous mode [ 347.494799][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 347.567392][T13736] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.613398][T13736] netlink: 'syz.3.2137': attribute type 219 has an invalid length. [ 347.778465][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.794105][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.802607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.894533][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 348.008696][T13750] FAULT_INJECTION: forcing a failure. [ 348.008696][T13750] name failslab, interval 1, probability 0, space 0, times 0 [ 348.057175][T13750] CPU: 0 UID: 0 PID: 13750 Comm: syz.2.2142 Not tainted syzkaller #0 PREEMPT(full) [ 348.057210][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.057224][T13750] Call Trace: [ 348.057233][T13750] [ 348.057243][T13750] dump_stack_lvl+0xe8/0x150 [ 348.057280][T13750] should_fail_ex+0x40c/0x560 [ 348.057309][T13750] should_failslab+0xa8/0x100 [ 348.057343][T13750] __kmalloc_cache_noprof+0xa8/0x660 [ 348.057369][T13750] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 348.057392][T13750] ? __kmalloc_cache_noprof+0x150/0x660 [ 348.057426][T13750] ? sctp_add_bind_addr+0x8c/0x370 [ 348.057443][T13750] ? sctp_add_bind_addr+0x8c/0x370 [ 348.057470][T13750] sctp_add_bind_addr+0x8c/0x370 [ 348.057496][T13750] sctp_copy_local_addr_list+0x31a/0x4e0 [ 348.057521][T13750] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 348.057545][T13750] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 348.057572][T13750] ? sctp_v4_is_any+0x35/0x60 [ 348.057592][T13750] ? sctp_copy_one_addr+0x93/0x360 [ 348.057618][T13750] sctp_bind_addr_copy+0xb3/0x3c0 [ 348.057642][T13750] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 348.057679][T13750] sctp_connect_new_asoc+0x2ff/0x6b0 [ 348.057711][T13750] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 348.057742][T13750] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 348.057770][T13750] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 348.057796][T13750] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 348.057825][T13750] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 348.057857][T13750] __sctp_connect+0x5cb/0xdc0 [ 348.057899][T13750] ? __pfx___sctp_connect+0x10/0x10 [ 348.057924][T13750] ? sctp_inet_connect+0xa0/0x210 [ 348.057952][T13750] ? __local_bh_enable_ip+0xd0/0x130 [ 348.057981][T13750] sctp_inet_connect+0x12e/0x210 [ 348.058009][T13750] __sys_connect+0x323/0x460 [ 348.058042][T13750] ? __pfx___sys_connect+0x10/0x10 [ 348.058087][T13750] ? __pfx_ksys_write+0x10/0x10 [ 348.058126][T13750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.058150][T13750] __x64_sys_connect+0x7a/0x90 [ 348.058183][T13750] do_syscall_64+0x174/0x580 [ 348.058208][T13750] ? trace_irq_disable+0x3b/0x140 [ 348.058234][T13750] ? clear_bhb_loop+0x70/0xc0 [ 348.058262][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.058284][T13750] RIP: 0033:0x7fe60659e0d9 [ 348.058304][T13750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.058323][T13750] RSP: 002b:00007fe6073c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 348.058346][T13750] RAX: ffffffffffffffda RBX: 00007fe606826090 RCX: 00007fe60659e0d9 [ 348.058362][T13750] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 348.058375][T13750] RBP: 00007fe6073c2090 R08: 0000000000000000 R09: 0000000000000000 [ 348.058387][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.058400][T13750] R13: 00007fe606826128 R14: 00007fe606826090 R15: 00007ffdb0fe4098 [ 348.058455][T13750] [ 348.918135][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.637514][T13793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2151'. [ 350.087893][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.148106][T13814] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2156'. [ 350.860574][T13841] ip6gre0: left promiscuous mode [ 350.939270][T13850] netlink: 'syz.1.2165': attribute type 2 has an invalid length. [ 350.961336][T13850] netlink: 'syz.1.2165': attribute type 2 has an invalid length. [ 351.074279][T13841] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 351.116888][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.223218][T11040] net_ratelimit: 5 callbacks suppressed [ 351.223239][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.267793][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.277951][T13841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.325345][T13841] vlan6: left promiscuous mode [ 351.340858][T13841] bond4: left promiscuous mode [ 351.374000][T13841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.391810][T13841] bond7: left promiscuous mode [ 351.397027][T13841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.411567][T13841] 8021q: adding VLAN 0 to HW filter on device bond8 [ 351.421143][T13841] macvtap1: left promiscuous mode [ 351.426302][T13841] vlan0: left promiscuous mode [ 351.442937][T13841] veth0_macvtap: entered promiscuous mode [ 351.519608][T13841] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.531392][T13841] 8021q: adding VLAN 0 to HW filter on device bond9 [ 351.701439][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 351.775075][T13876] sctp: [Deprecated]: syz.3.2172 (pid 13876) Use of int in max_burst socket option deprecated. [ 351.775075][T13876] Use struct sctp_assoc_value instead [ 351.794359][ T187] syz2: Port: 1 Link ACTIVE [ 351.804057][T11036] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 351.844073][T11036] bond6: (slave veth7): making interface the new active one [ 351.878969][T11036] bond6: active interface up! [ 351.892494][T13869] bond0: Caught tx_queue_len zero misconfig [ 351.945765][T13873] netlink: 'syz.1.2171': attribute type 3 has an invalid length. [ 352.002152][T11042] bond8: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 352.063609][T13880] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 352.179900][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.253163][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 352.495156][T13880] 8021q: adding VLAN 0 to HW filter on device bond10 [ 352.500527][T11035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.545879][T13904] bond10: (slave geneve2): making interface the new active one [ 352.555909][T13904] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 352.845775][T13920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2178'. [ 352.885169][T13921] netlink: 'syz.3.2179': attribute type 12 has an invalid length. [ 352.914711][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 353.335006][T13921] bond11: option primary_reselect: invalid value (255) [ 353.408943][T13921] bond11 (unregistering): Released all slaves [ 353.465077][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 353.541204][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.549720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.646283][T13943] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 353.680111][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.729878][T13945] IPVS: set_ctl: invalid protocol: 44 172.20.20.36:20001 [ 353.751565][T13947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2184'. [ 353.871521][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.945238][T13943] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.222628][T13947] bond7: (slave geneve2): making interface the new active one [ 354.295874][T13947] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 354.589217][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.651860][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.763073][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.806547][T13959] syzkaller0: entered promiscuous mode [ 354.822547][T13959] syzkaller0: entered allmulticast mode [ 354.831652][ T1347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.949633][T13990] syzkaller0: entered promiscuous mode [ 354.966161][T13990] syzkaller0: entered allmulticast mode [ 355.336747][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2195'. [ 356.742019][T11036] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 356.898024][ T9] net_ratelimit: 2 callbacks suppressed [ 356.898046][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.015661][T13955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.052433][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.105306][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 358.202411][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.419704][T14051] netlink: 'syz.4.2211': attribute type 11 has an invalid length. [ 358.454996][T14054] netlink: 'syz.4.2211': attribute type 11 has an invalid length. [ 358.668831][T14058] syzkaller1: entered promiscuous mode [ 358.704332][T14058] syzkaller1: entered allmulticast mode [ 358.728190][T14065] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 359.175357][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2219'. [ 359.298042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.307975][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.316428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.329535][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.677897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.972753][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.021510][T14110] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2230'. [ 360.038518][ T50] block nbd1: Receive control failed (result -32) [ 360.043620][ T5623] block nbd1: Receive control failed (result -32) [ 360.143433][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 360.984510][T14138] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 361.016135][T14138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2240'. [ 361.052426][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'. [ 361.075904][T14140] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2239'. [ 361.155216][T14140] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2239'. [ 361.196342][T14143] gtp3: entered promiscuous mode [ 361.221731][T14143] gtp3: entered allmulticast mode [ 361.561780][T14149] syz_tun: entered allmulticast mode [ 361.588034][T14148] dvmrp8: entered allmulticast mode [ 361.608145][T14151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 362.065633][T14167] netlink: 'syz.2.2246': attribute type 32 has an invalid length. [ 362.075657][T14155] bond8 (unregistering): Released all slaves [ 362.096406][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 362.166996][T14147] syz_tun: left allmulticast mode [ 362.341877][T14167] bond8: option coupled_control: invalid value (110) [ 362.417123][T14167] bond8 (unregistering): Released all slaves [ 362.731444][T10257] net_ratelimit: 4 callbacks suppressed [ 362.731464][T10257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.960129][T14188] SET target dimension over the limit! [ 362.976578][T14196] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 362.994988][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.025401][T14196] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 363.140154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.166745][T11039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.305047][T14204] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 363.354212][T14204] __nla_validate_parse: 6 callbacks suppressed [ 363.354230][T14204] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2258'. [ 363.391030][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 363.454836][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 363.500970][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2258'. [ 363.995381][T14243] netlink: 'syz.4.2265': attribute type 21 has an invalid length. [ 364.070177][T14243] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2265'. [ 364.115744][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 364.200282][T14253] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 364.245886][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 364.283764][T14248] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2268'. [ 365.075317][ T7104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.083827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.129390][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.700284][T14303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.710727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.370025][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 366.391031][T14319] FAULT_INJECTION: forcing a failure. [ 366.391031][T14319] name failslab, interval 1, probability 0, space 0, times 0 [ 366.426219][T14319] CPU: 0 UID: 0 PID: 14319 Comm: syz.1.2281 Not tainted syzkaller #0 PREEMPT(full) [ 366.426249][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.426268][T14319] Call Trace: [ 366.426278][T14319] [ 366.426287][T14319] dump_stack_lvl+0xe8/0x150 [ 366.426324][T14319] should_fail_ex+0x40c/0x560 [ 366.426355][T14319] should_failslab+0xa8/0x100 [ 366.426388][T14319] __kmalloc_cache_noprof+0xa8/0x660 [ 366.426414][T14319] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 366.426436][T14319] ? __kmalloc_cache_noprof+0x150/0x660 [ 366.426460][T14319] ? sctp_add_bind_addr+0x8c/0x370 [ 366.426479][T14319] ? sctp_add_bind_addr+0x8c/0x370 [ 366.426508][T14319] sctp_add_bind_addr+0x8c/0x370 [ 366.426533][T14319] sctp_copy_local_addr_list+0x31a/0x4e0 [ 366.426558][T14319] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 366.426580][T14319] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 366.426606][T14319] ? sctp_v4_is_any+0x35/0x60 [ 366.426629][T14319] ? sctp_copy_one_addr+0x93/0x360 [ 366.426653][T14319] sctp_bind_addr_copy+0xb3/0x3c0 [ 366.426676][T14319] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 366.426711][T14319] sctp_connect_new_asoc+0x2ff/0x6b0 [ 366.426742][T14319] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 366.426771][T14319] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 366.426799][T14319] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 366.426825][T14319] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 366.426853][T14319] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 366.426885][T14319] __sctp_connect+0x5cb/0xdc0 [ 366.426925][T14319] ? __pfx___sctp_connect+0x10/0x10 [ 366.426950][T14319] ? sctp_inet_connect+0xa0/0x210 [ 366.426977][T14319] ? __local_bh_enable_ip+0xd0/0x130 [ 366.427005][T14319] sctp_inet_connect+0x12e/0x210 [ 366.427033][T14319] __sys_connect+0x323/0x460 [ 366.427067][T14319] ? __pfx___sys_connect+0x10/0x10 [ 366.427111][T14319] ? __pfx_ksys_write+0x10/0x10 [ 366.427147][T14319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.427171][T14319] __x64_sys_connect+0x7a/0x90 [ 366.427209][T14319] do_syscall_64+0x174/0x580 [ 366.427235][T14319] ? trace_irq_disable+0x3b/0x140 [ 366.427261][T14319] ? clear_bhb_loop+0x70/0xc0 [ 366.427288][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.427316][T14319] RIP: 0033:0x7f0c0739e0d9 [ 366.427336][T14319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.427355][T14319] RSP: 002b:00007f0c08244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 366.427378][T14319] RAX: ffffffffffffffda RBX: 00007f0c07626090 RCX: 00007f0c0739e0d9 [ 366.427392][T14319] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 366.427405][T14319] RBP: 00007f0c08244090 R08: 0000000000000000 R09: 0000000000000000 [ 366.427423][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.427434][T14319] R13: 00007f0c07626128 R14: 00007f0c07626090 R15: 00007ffd0661dc38 [ 366.427467][T14319] [ 367.075310][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 367.982528][ T1102] net_ratelimit: 2 callbacks suppressed [ 367.982550][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.089816][ T5623] block nbd2: Receive control failed (result -1) [ 368.407002][T14373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.417953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.437617][T14369] __nla_validate_parse: 3 callbacks suppressed [ 368.437638][T14369] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2295'. [ 368.471185][T14373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.483807][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.498345][T14369] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 368.558373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.586377][T14371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.596296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.863071][T14386] netlink: 'syz.4.2300': attribute type 1 has an invalid length. [ 368.889765][T14386] netlink: 'syz.4.2300': attribute type 11 has an invalid length. [ 368.900457][T14389] tipc: Enabling of bearer rejected, already enabled [ 368.909980][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.925962][T14386] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2300'. [ 368.993044][T14396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2301'. [ 369.156344][T14399] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2303'. [ 369.294960][T14403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2305'. [ 369.404565][T14408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2306'. [ 371.543449][ T5275] veth0_vlan: left promiscuous mode [ 371.605953][ T187] veth0_vlan: entered promiscuous mode [ 371.637933][T14502] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 371.671263][T14496] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2328'. [ 371.682375][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'. [ 371.717671][T14502] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2329'. [ 371.728501][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'. [ 372.991781][T14558] net_ratelimit: 7 callbacks suppressed [ 372.991804][T14558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.598600][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.837223][T14593] Bluetooth: MGMT ver 1.23 [ 373.915871][T14594] x_tables: duplicate underflow at hook 2 [ 374.125067][T14600] __nla_validate_parse: 3 callbacks suppressed [ 374.125097][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'. [ 374.147571][T14600] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 374.424784][T14611] netlink: 'syz.4.2356': attribute type 83 has an invalid length. [ 374.545045][T14615] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 374.660393][T11042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.748558][T11036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.899882][T14624] netlink: Unknown conntrack attr (type=32, max=9) [ 374.936373][T14624] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.150664][T14628] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 375.171924][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2360'. [ 375.385560][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.393088][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.868868][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.210550][T14594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.282586][T14594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.581547][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.590037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.664909][T14594] veth0_macvtap: left allmulticast mode [ 377.618855][ T33] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.647015][ T33] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.880097][T11036] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.925741][T11036] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.966029][T11036] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.014684][T11036] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.109502][T11036] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.126183][T11036] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.138159][ T33] net_ratelimit: 2 callbacks suppressed [ 378.138179][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.501481][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878267][T14681] syzkaller0: entered promiscuous mode [ 378.932114][T14681] syzkaller0: entered allmulticast mode [ 378.944620][T14683] netlink: 'syz.1.2375': attribute type 7 has an invalid length. [ 379.298696][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.545420][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 379.612851][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 379.726391][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 379.956546][T14719] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 380.020931][T11036] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.044196][T11036] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.407943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.428863][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.466654][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.491351][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 380.557781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.630166][T14742] netlink: 'syz.4.2393': attribute type 4 has an invalid length. [ 381.028845][T14760] netlink: 'syz.3.2399': attribute type 1 has an invalid length. [ 381.170362][T14767] netlink: 'syz.0.2402': attribute type 21 has an invalid length. [ 381.197358][T14761] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 381.298536][T14772] netlink: 'syz.1.2401': attribute type 23 has an invalid length. [ 381.366010][T14774] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 381.410829][T14774] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 381.821259][T14798] netlink: 'syz.1.2411': attribute type 2 has an invalid length. [ 381.838283][T14796] netlink: 'syz.3.2410': attribute type 30 has an invalid length. [ 382.063861][T14796] bond12: option arp_missed_max: invalid value (0) [ 382.077703][T14796] bond12: option arp_missed_max: allowed values 1 - 255 [ 382.152742][T14796] bond12 (unregistering): Released all slaves [ 382.219475][T14812] netlink: ct family unspecified [ 382.541674][T14819] FAULT_INJECTION: forcing a failure. [ 382.541674][T14819] name failslab, interval 1, probability 0, space 0, times 0 [ 382.575446][T14819] CPU: 0 UID: 0 PID: 14819 Comm: syz.0.2414 Not tainted syzkaller #0 PREEMPT(full) [ 382.575478][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.575492][T14819] Call Trace: [ 382.575501][T14819] [ 382.575510][T14819] dump_stack_lvl+0xe8/0x150 [ 382.575547][T14819] should_fail_ex+0x40c/0x560 [ 382.575576][T14819] should_failslab+0xa8/0x100 [ 382.575610][T14819] __kmalloc_cache_noprof+0xa8/0x660 [ 382.575646][T14819] ? sctp_copy_local_addr_list+0x47a/0x4e0 [ 382.575677][T14819] ? sctp_transport_new+0x7e/0x620 [ 382.575707][T14819] ? sctp_transport_new+0x7e/0x620 [ 382.575746][T14819] sctp_transport_new+0x7e/0x620 [ 382.575787][T14819] sctp_assoc_add_peer+0x299/0x1430 [ 382.575833][T14819] sctp_connect_new_asoc+0x329/0x6b0 [ 382.575866][T14819] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 382.575896][T14819] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 382.575925][T14819] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 382.575951][T14819] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 382.576000][T14819] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 382.576032][T14819] __sctp_connect+0x5cb/0xdc0 [ 382.576074][T14819] ? __pfx___sctp_connect+0x10/0x10 [ 382.576099][T14819] ? sctp_inet_connect+0xa0/0x210 [ 382.576127][T14819] ? __local_bh_enable_ip+0xd0/0x130 [ 382.576157][T14819] sctp_inet_connect+0x12e/0x210 [ 382.576186][T14819] __sys_connect+0x323/0x460 [ 382.576226][T14819] ? __pfx___sys_connect+0x10/0x10 [ 382.576272][T14819] ? __pfx_ksys_write+0x10/0x10 [ 382.576310][T14819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.576335][T14819] __x64_sys_connect+0x7a/0x90 [ 382.576367][T14819] do_syscall_64+0x174/0x580 [ 382.576393][T14819] ? trace_irq_disable+0x3b/0x140 [ 382.576419][T14819] ? clear_bhb_loop+0x70/0xc0 [ 382.576446][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.576468][T14819] RIP: 0033:0x7fa66fd9e0d9 [ 382.576492][T14819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.576509][T14819] RSP: 002b:00007fa670c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 382.576531][T14819] RAX: ffffffffffffffda RBX: 00007fa670026090 RCX: 00007fa66fd9e0d9 [ 382.576546][T14819] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 382.576559][T14819] RBP: 00007fa670c63090 R08: 0000000000000000 R09: 0000000000000000 [ 382.576571][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.576583][T14819] R13: 00007fa670026128 R14: 00007fa670026090 R15: 00007ffd7b09c2a8 [ 382.576616][T14819] [ 382.869541][T14821] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 382.904806][T14821] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 383.040893][T14826] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2417'. [ 383.361216][T14834] can: request_module (can-proto-0) failed. [ 383.377927][T14840] syzkaller0: entered promiscuous mode [ 383.403354][T14840] syzkaller0: entered allmulticast mode [ 383.427255][T14844] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 383.880924][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2425'. [ 384.399028][T14883] FAULT_INJECTION: forcing a failure. [ 384.399028][T14883] name failslab, interval 1, probability 0, space 0, times 0 [ 384.414934][T14882] netlink: 'syz.0.2434': attribute type 9 has an invalid length. [ 384.427519][T14883] CPU: 0 UID: 0 PID: 14883 Comm: syz.1.2433 Not tainted syzkaller #0 PREEMPT(full) [ 384.427550][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.427564][T14883] Call Trace: [ 384.427573][T14883] [ 384.427581][T14883] dump_stack_lvl+0xe8/0x150 [ 384.427618][T14883] should_fail_ex+0x40c/0x560 [ 384.427647][T14883] should_failslab+0xa8/0x100 [ 384.427681][T14883] __kmalloc_cache_noprof+0xa8/0x660 [ 384.427708][T14883] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 384.427731][T14883] ? __kmalloc_cache_noprof+0x150/0x660 [ 384.427757][T14883] ? sctp_add_bind_addr+0x8c/0x370 [ 384.427785][T14883] ? sctp_add_bind_addr+0x8c/0x370 [ 384.427823][T14883] sctp_add_bind_addr+0x8c/0x370 [ 384.427851][T14883] sctp_copy_local_addr_list+0x31a/0x4e0 [ 384.427878][T14883] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 384.427901][T14883] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 384.427929][T14883] ? sctp_v4_is_any+0x35/0x60 [ 384.427953][T14883] ? sctp_copy_one_addr+0x93/0x360 [ 384.427979][T14883] sctp_bind_addr_copy+0xb3/0x3c0 [ 384.428004][T14883] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 384.428040][T14883] sctp_connect_new_asoc+0x2ff/0x6b0 [ 384.428074][T14883] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 384.428103][T14883] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 384.428132][T14883] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 384.428159][T14883] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 384.428187][T14883] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 384.428219][T14883] __sctp_connect+0x5cb/0xdc0 [ 384.428262][T14883] ? __pfx___sctp_connect+0x10/0x10 [ 384.428286][T14883] ? sctp_inet_connect+0xa0/0x210 [ 384.428312][T14883] ? __local_bh_enable_ip+0xd0/0x130 [ 384.428341][T14883] sctp_inet_connect+0x12e/0x210 [ 384.428368][T14883] __sys_connect+0x323/0x460 [ 384.428404][T14883] ? __pfx___sys_connect+0x10/0x10 [ 384.428449][T14883] ? __pfx_ksys_write+0x10/0x10 [ 384.428488][T14883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.428514][T14883] __x64_sys_connect+0x7a/0x90 [ 384.428547][T14883] do_syscall_64+0x174/0x580 [ 384.428573][T14883] ? trace_irq_disable+0x3b/0x140 [ 384.428600][T14883] ? clear_bhb_loop+0x70/0xc0 [ 384.428628][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.428650][T14883] RIP: 0033:0x7f0c0739e0d9 [ 384.428671][T14883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.428690][T14883] RSP: 002b:00007f0c08244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 384.428714][T14883] RAX: ffffffffffffffda RBX: 00007f0c07626090 RCX: 00007f0c0739e0d9 [ 384.428729][T14883] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 384.428743][T14883] RBP: 00007f0c08244090 R08: 0000000000000000 R09: 0000000000000000 [ 384.428756][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.428769][T14883] R13: 00007f0c07626128 R14: 00007f0c07626090 R15: 00007ffd0661dc38 [ 384.428811][T14883] [ 384.760455][T14793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.050444][T14907] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 385.059192][T14907] netlink: 'syz.3.2439': attribute type 3 has an invalid length. [ 385.066992][T14907] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2439'. [ 385.084068][T14907] NCSI netlink: No device for ifindex 813332851 [ 385.380865][T14915] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 385.611637][T14924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2446'. [ 385.697084][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 385.898129][T14935] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2451'. [ 385.945452][T14935] nbd: illegal input index -8454144 [ 385.987129][T14938] FAULT_INJECTION: forcing a failure. [ 385.987129][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 386.087413][T14938] CPU: 0 UID: 0 PID: 14938 Comm: syz.0.2452 Not tainted syzkaller #0 PREEMPT(full) [ 386.087443][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.087463][T14938] Call Trace: [ 386.087471][T14938] [ 386.087480][T14938] dump_stack_lvl+0xe8/0x150 [ 386.087517][T14938] should_fail_ex+0x40c/0x560 [ 386.087546][T14938] should_failslab+0xa8/0x100 [ 386.087581][T14938] __kmalloc_noprof+0xfe/0x720 [ 386.087609][T14938] ? sctp_bind_addrs_to_raw+0x10a/0x380 [ 386.087632][T14938] ? sctp_bind_addrs_to_raw+0x10a/0x380 [ 386.087664][T14938] sctp_bind_addrs_to_raw+0x10a/0x380 [ 386.087695][T14938] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 386.087734][T14938] sctp_make_init+0x171/0xe20 [ 386.087759][T14938] ? __lock_acquire+0x683/0x2cf0 [ 386.087797][T14938] ? __pfx_sctp_make_init+0x10/0x10 [ 386.087830][T14938] ? lock_acquire+0x106/0x350 [ 386.087857][T14938] ? rht_lock+0x8b/0x180 [ 386.087896][T14938] sctp_sf_do_prm_asoc+0xcf/0x3f0 [ 386.087930][T14938] sctp_do_sm+0x239/0x5d50 [ 386.087962][T14938] ? __pfx_sctp_pname+0x10/0x10 [ 386.087992][T14938] ? sctp_ulpevent_notify_peer_addr_change+0x118/0xb20 [ 386.088037][T14938] ? __pfx_sctp_do_sm+0x10/0x10 [ 386.088109][T14938] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 386.088141][T14938] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 386.088171][T14938] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 386.088202][T14938] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 386.088236][T14938] __sctp_connect+0x911/0xdc0 [ 386.088278][T14938] ? __pfx___sctp_connect+0x10/0x10 [ 386.088303][T14938] ? sctp_inet_connect+0xa0/0x210 [ 386.088330][T14938] ? __local_bh_enable_ip+0xd0/0x130 [ 386.088368][T14938] sctp_inet_connect+0x12e/0x210 [ 386.088397][T14938] __sys_connect+0x323/0x460 [ 386.088433][T14938] ? __pfx___sys_connect+0x10/0x10 [ 386.088485][T14938] ? __pfx_ksys_write+0x10/0x10 [ 386.088531][T14938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.088556][T14938] __x64_sys_connect+0x7a/0x90 [ 386.088589][T14938] do_syscall_64+0x174/0x580 [ 386.088615][T14938] ? trace_irq_disable+0x3b/0x140 [ 386.088642][T14938] ? clear_bhb_loop+0x70/0xc0 [ 386.088669][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.088692][T14938] RIP: 0033:0x7fa66fd9e0d9 [ 386.088712][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.088731][T14938] RSP: 002b:00007fa670c63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 386.088753][T14938] RAX: ffffffffffffffda RBX: 00007fa670026090 RCX: 00007fa66fd9e0d9 [ 386.088769][T14938] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 386.088783][T14938] RBP: 00007fa670c63090 R08: 0000000000000000 R09: 0000000000000000 [ 386.088797][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.088809][T14938] R13: 00007fa670026128 R14: 00007fa670026090 R15: 00007ffd7b09c2a8 [ 386.088844][T14938] [ 386.451911][T14946] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 387.351074][T14963] syzkaller1: entered promiscuous mode [ 387.357012][T14972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2462'. [ 387.371423][T14963] syzkaller1: entered allmulticast mode [ 387.444866][T14973] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 387.702123][T14983] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2464'. [ 387.950408][T14987] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 387.994607][T14987] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 388.052351][T14993] netlink: 'syz.4.2467': attribute type 1 has an invalid length. [ 388.096873][T14996] xt_ipcomp: unknown flags 1D [ 388.240377][T15004] netlink: 'syz.1.2470': attribute type 64 has an invalid length. [ 388.346018][T15007] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 388.377966][T15007] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 388.416996][T15012] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2472'. [ 388.453013][T15014] tipc: Enabled bearer , priority 0 [ 388.750263][T15027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 389.879732][T15080] pim6reg: entered allmulticast mode [ 389.900225][T15080] pim6reg: left allmulticast mode [ 390.464096][T15115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2498'. [ 390.536220][T15115] openvswitch: netlink: Flow key attr not present in new flow. [ 390.593039][T15100] bond9 (unregistering): Released all slaves [ 390.821594][ T5906] hsr0: entered promiscuous mode [ 390.900382][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2500'. [ 391.485680][T15146] xt_hashlimit: size too large, truncated to 1048576 [ 391.586832][T15147] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 391.638614][T15158] bridge_slave_0 (unregistering): left allmulticast mode [ 391.956752][T15158] bridge_slave_0 (unregistering): left promiscuous mode [ 392.008920][T15158] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.193735][T15170] netlink: 'syz.4.2510': attribute type 11 has an invalid length. [ 392.231835][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2512'. [ 392.619943][T15194] syzkaller0: entered promiscuous mode [ 392.635874][T15194] syzkaller0: entered allmulticast mode [ 393.098077][T15213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2520'. [ 393.640264][T15230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2522'. [ 393.980006][T15248] ipvlan1: Caught tx_queue_len zero misconfig [ 394.093561][T15253] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2527'. [ 394.157028][T15256] netlink: 'syz.0.2528': attribute type 4 has an invalid length. [ 394.174356][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2527'. [ 394.315656][T15262] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2529'. [ 394.478617][T15256] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 394.863202][T15273] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2531'. [ 396.175288][T15217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.450004][T15299] syzkaller0: entered promiscuous mode [ 396.456275][T15299] syzkaller0: entered allmulticast mode [ 396.529954][T15301] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.558764][T15301] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.611284][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2540'. [ 396.624457][T15308] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2537'. [ 396.840133][T15316] x_tables: duplicate underflow at hook 4 [ 396.879284][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 396.940869][T15317] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.711264][T15343] pimreg3: entered allmulticast mode [ 397.986079][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 398.018961][T15355] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2552'. [ 398.611236][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 398.647535][T15367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 398.970867][T15384] netlink: 'syz.2.2559': attribute type 58 has an invalid length. [ 399.020526][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2559'. [ 399.030473][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 399.079590][T15390] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 399.182078][ T5275] netdevsim netdevsim4 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 399.217218][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.700982][T15424] netlink: 'syz.4.2569': attribute type 4 has an invalid length. [ 399.952289][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2571'. [ 400.314803][T15454] veth1_to_team: Caught tx_queue_len zero misconfig [ 400.377916][T15457] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 400.596476][T15461] policy can only be matched on NF_INET_PRE_ROUTING [ 400.596502][T15461] unable to load match [ 401.152991][T15491] netlink: 'syz.1.2583': attribute type 25 has an invalid length. [ 401.923524][T15519] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 401.940336][T15519] team0: Device ipvlan2 is already an upper device of the team interface [ 402.351664][T15532] syzkaller0: entered promiscuous mode [ 402.375606][T15532] syzkaller0: entered allmulticast mode [ 402.403649][T15540] TC_ACT_REPEAT abuse ? [ 402.500806][T15545] netlink: 'syz.4.2603': attribute type 2 has an invalid length. [ 402.539941][T15544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.558074][T15570] IPv6: sit1: Disabled Multicast RS [ 405.306025][T15588] __nla_validate_parse: 5 callbacks suppressed [ 405.306047][T15588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2615'. [ 406.463380][T15609] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2622'. [ 406.505536][T15611] xt_hashlimit: max too large, truncated to 1048576 [ 406.596646][T15616] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2625'. [ 406.624559][T15611] No such timeout policy "syz1" [ 406.707818][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 406.785002][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 407.345991][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2629'. [ 407.594370][T15638] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 407.855712][T15648] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2630'. [ 407.998719][T15645] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2630'. [ 408.127131][T15659] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.2634'. [ 408.361271][T15667] netlink: 'syz.1.2637': attribute type 83 has an invalid length. [ 408.386505][T15666] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2635'. [ 408.444237][T15659] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 408.456258][T15659] bond12 (unregistering): Released all slaves [ 409.052886][T15683] sock: sock_set_timeout: `syz.3.2640' (pid 15683) tries to set negative timeout [ 409.080052][T15686] openvswitch: netlink: Message has 4 unknown bytes. [ 409.123924][T15671] syzkaller1: entered promiscuous mode [ 409.145375][T15671] syzkaller1: entered allmulticast mode [ 409.481383][T15703] netlink: 'syz.4.2647': attribute type 3 has an invalid length. [ 409.843227][T15715] netlink: 'syz.3.2651': attribute type 1 has an invalid length. [ 410.489190][T15708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.784212][T15738] __nla_validate_parse: 4 callbacks suppressed [ 410.784233][T15738] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2656'. [ 410.925394][T15742] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2656'. [ 411.047155][T15747] team0: Caught tx_queue_len zero misconfig [ 411.173764][T15748] netlink: 'syz.2.2655': attribute type 21 has an invalid length. [ 411.392040][T15754] netlink: 'syz.0.2661': attribute type 34 has an invalid length. [ 411.580937][T15755] syzkaller1: entered promiscuous mode [ 411.627742][T15755] syzkaller1: entered allmulticast mode [ 411.907028][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 412.026353][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2663'. [ 412.112008][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2663'. [ 412.363785][T15775] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 412.613922][T15779] sctp: [Deprecated]: syz.3.2669 (pid 15779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.613922][T15779] Use struct sctp_sack_info instead [ 412.685910][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 412.707014][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 412.739478][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 412.781914][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 412.829032][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 413.051020][T15795] openvswitch: netlink: Message has 193 unknown bytes. [ 413.642652][T15802] bond9: entered allmulticast mode [ 413.695866][T15802] 8021q: adding VLAN 0 to HW filter on device bond9 [ 413.966125][T15822] netlink: 'syz.1.2680': attribute type 2 has an invalid length. [ 414.162283][T15822] xt_hashlimit: size too large, truncated to 1048576 [ 414.226024][T15825] xt_hashlimit: size too large, truncated to 1048576 [ 414.661528][T15837] netlink: 'syz.2.2684': attribute type 4 has an invalid length. [ 414.756132][T15835] veth11: entered promiscuous mode [ 415.869468][T15867] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 415.884272][T15873] __nla_validate_parse: 60 callbacks suppressed [ 415.884291][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2694'. [ 416.068271][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 416.620980][T15881] team0: Port device syz_tun removed [ 418.123858][T15931] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2708'. [ 418.494049][T15938] gtp0: entered promiscuous mode [ 418.537274][T15938] gtp0: entered allmulticast mode [ 418.544032][T15943] netlink: 'syz.4.2712': attribute type 1 has an invalid length. [ 418.775405][T15943] 8021q: adding VLAN 0 to HW filter on device bond10 [ 418.935043][T15945] bond10: (slave veth13): Enslaving as an active interface with a down link [ 419.159395][T15946] bond10: (slave veth15): Enslaving as an active interface with a down link [ 419.305896][T15958] vcan1: entered promiscuous mode [ 419.323639][T15958] vcan1: entered allmulticast mode [ 421.610264][T16006] netlink: 'syz.2.2731': attribute type 21 has an invalid length. [ 421.642141][T16006] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2731'. [ 421.698569][T16006] netlink: 'syz.2.2731': attribute type 4 has an invalid length. [ 421.710226][T16011] netlink: 'syz.2.2731': attribute type 21 has an invalid length. [ 421.748193][T16006] netlink: 'syz.2.2731': attribute type 5 has an invalid length. [ 421.807288][T16006] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2731'. [ 421.903478][T16011] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2731'. [ 421.991437][T16011] netlink: 'syz.2.2731': attribute type 4 has an invalid length. [ 422.003106][T16017] vxcan0: tx address claim with dest, not broadcast [ 422.091760][T16011] netlink: 'syz.2.2731': attribute type 5 has an invalid length. [ 422.159715][T16011] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2731'. [ 423.125528][T16035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.698223][T16045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2742'. [ 424.525682][T16034] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2737'. [ 424.564698][T16074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2749'. [ 424.577650][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.602773][T16034] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2737'. [ 424.677121][T16076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2749'. [ 424.907451][T16080] netlink: 'syz.4.2751': attribute type 28 has an invalid length. [ 424.931444][T16080] netlink: 'syz.4.2751': attribute type 3 has an invalid length. [ 424.951450][T16080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2751'. [ 424.986376][T16082] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 425.097645][T16082] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 426.833380][T16128] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 426.843557][T16143] __nla_validate_parse: 3 callbacks suppressed [ 426.843578][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 427.096114][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2769'. [ 427.123016][T16147] Cannot find add_set index 65532 as target [ 427.191551][T16147] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2770'. [ 427.378121][T16155] validate_nla: 3 callbacks suppressed [ 427.378143][T16155] netlink: 'syz.1.2771': attribute type 1 has an invalid length. [ 427.532021][T16152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2771'. [ 427.639620][T16152] netlink: 'syz.1.2771': attribute type 10 has an invalid length. [ 427.698255][T16152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2771'. [ 427.750837][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 427.751244][T16161] netlink: 'syz.0.2775': attribute type 10 has an invalid length. [ 427.942512][T16162] 8021q: adding VLAN 0 to HW filter on device bond8 [ 427.986568][T16169] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 429.044908][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2782'. [ 429.135232][T16196] xt_hashlimit: size too large, truncated to 1048576 [ 429.360393][T16205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2787'. [ 429.960432][T16223] netlink: 'syz.1.2792': attribute type 11 has an invalid length. [ 430.025143][T16223] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.2792'. [ 430.306997][T16234] netlink: Conntrack attr has 12 unknown bytes [ 430.415691][T16234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.766138][T16252] ip_tables: iptables: counters copy to user failed while replacing table [ 431.620717][T16276] netlink: 'syz.2.2805': attribute type 2 has an invalid length. [ 431.869068][T16292] netlink: 'syz.1.2810': attribute type 3 has an invalid length. [ 431.920398][T16294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2807'. [ 431.985623][T16294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2807'. [ 432.006555][T16297] sctp: [Deprecated]: syz.1.2810 (pid 16297) Use of int in max_burst socket option deprecated. [ 432.006555][T16297] Use struct sctp_assoc_value instead [ 432.039175][T16300] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2811'. [ 432.229390][T16288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2809'. [ 432.459457][T16307] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 433.138091][T16325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.598530][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 434.482356][T16376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.567621][T16374] openvswitch: netlink: IP tunnel dst address not specified [ 434.592688][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2831'. [ 435.259246][T16390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2836'. [ 435.447336][T11034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.487910][T11034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.765242][T16401] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2840'. [ 436.058114][T16409] netlink: 'syz.4.2844': attribute type 17 has an invalid length. [ 436.079332][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'. [ 436.090092][T16409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2844'. [ 436.413473][T16416] erspan0: entered promiscuous mode [ 436.524091][T16416] vlan6: entered promiscuous mode [ 436.798014][T16404] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 436.890929][T16404] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 436.991413][T16404] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 437.140758][T16433] tipc: Started in network mode [ 437.173954][T16433] tipc: Node identity ac141441, cluster identity 9 [ 437.226702][T16433] tipc: Enabled bearer , priority 10 [ 437.561230][T16444] ip_tables: iptables: counters copy to user failed while replacing table [ 437.917228][T16457] netlink: 'syz.1.2854': attribute type 11 has an invalid length. [ 438.008815][T16461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2855'. [ 438.034847][T16464] netlink: 'syz.3.2856': attribute type 63 has an invalid length. [ 438.063316][T16464] netlink: 'syz.3.2856': attribute type 63 has an invalid length. [ 438.099107][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2855'. [ 438.339299][T16476] netlink: 'syz.3.2860': attribute type 21 has an invalid length. [ 438.356660][T15561] tipc: Node number set to 2886997057 [ 438.712337][T16490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 438.798927][T16489] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 438.950778][T16491] batadv0: entered promiscuous mode [ 439.014789][T16491] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 439.230555][T16503] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2867'. [ 439.261903][T16506] x_tables: duplicate underflow at hook 1 [ 439.855097][T16518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2871'. [ 439.940662][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.986950][T16518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2871'. [ 440.009354][T16521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2872'. [ 440.092770][T16524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2871'. [ 440.724457][T16537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.656517][T16593] openvswitch: netlink: IP tunnel dst address not specified [ 442.753689][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2893'. [ 442.780321][T16564] netlink: 'syz.1.2883': attribute type 4 has an invalid length. [ 442.797930][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2893'. [ 444.012181][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 444.301472][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.315944][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.325946][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.332909][T16642] netlink: 'syz.4.2906': attribute type 1 has an invalid length. [ 444.346450][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 444.355833][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.568675][T16642] 8021q: adding VLAN 0 to HW filter on device bond12 [ 444.626266][T16652] SET target dimension over the limit! [ 444.689982][T16647] bond0: (slave veth0_to_bond): Releasing backup interface [ 444.749530][T16647] bond12: (slave veth0_to_bond): making interface the new active one [ 444.830169][T16647] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 446.428272][ T5623] Bluetooth: hci5: command tx timeout [ 446.582397][T16626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.992209][T16691] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 447.009926][T16692] --map-set only usable from mangle table [ 447.090169][T16695] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 447.108780][T16695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2915'. [ 447.132418][T16691] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 447.138112][T16641] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.176659][T16641] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.196820][T16641] bridge_slave_0: entered allmulticast mode [ 447.216741][T16641] bridge_slave_0: entered promiscuous mode [ 447.245971][T16641] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.259783][T16641] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.277820][T16641] bridge_slave_1: entered allmulticast mode [ 447.410752][T16705] netlink: 'syz.2.2917': attribute type 1 has an invalid length. [ 447.489140][T16641] bridge_slave_1: entered promiscuous mode [ 447.568893][T16709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'. [ 447.816327][T16705] 8021q: adding VLAN 0 to HW filter on device bond9 [ 447.929799][T16717] netlink: 'syz.3.2921': attribute type 1 has an invalid length. [ 448.024616][T16706] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 448.163539][T16641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.239523][T16641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.438006][T16641] team0: Port device team_slave_0 added [ 448.460119][T16641] team0: Port device team_slave_1 added [ 448.499701][ T5623] Bluetooth: hci5: command tx timeout [ 448.991744][T16641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.022649][T16641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.136509][T16641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.157720][T16749] netlink: 'syz.1.2930': attribute type 142 has an invalid length. [ 449.181939][T16752] netlink: 'syz.1.2930': attribute type 142 has an invalid length. [ 449.245356][T16744] IPv6: sit1: Disabled Multicast RS [ 449.333530][T16641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.353557][T16641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.387678][T16641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.429683][T16760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2931'. [ 449.526205][T16641] hsr_slave_0: entered promiscuous mode [ 449.536724][T16641] hsr_slave_1: entered promiscuous mode [ 449.559786][T16641] debugfs: 'hsr0' already exists in 'hsr' [ 449.573478][T16641] Cannot create hsr debugfs directory [ 449.586863][T16763] netlink: 'syz.1.2932': attribute type 1 has an invalid length. [ 449.646551][T16763] 8021q: adding VLAN 0 to HW filter on device bond9 [ 449.738097][T16763] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 450.478719][T16777] netlink: 'syz.1.2936': attribute type 1 has an invalid length. [ 450.553381][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 450.579170][ T5623] Bluetooth: hci5: command tx timeout [ 450.762005][T16777] 8021q: adding VLAN 0 to HW filter on device bond10 [ 450.801306][T16785] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 450.945153][T16641] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.142993][T16641] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.226450][T16799] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.255675][T16641] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.290474][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2943'. [ 451.302426][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 451.314616][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2943'. [ 451.324571][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 451.358894][T16641] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.243418][T16821] netlink: 'syz.2.2947': attribute type 8 has an invalid length. [ 452.251709][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 452.269491][T16821] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.277041][T16821] bridge0: port 1(1¾x9ÿ) entered disabled state [ 452.657870][ T5623] Bluetooth: hci5: command tx timeout [ 453.193497][T16773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.222288][T16641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.324900][T16641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.386653][T16641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.474681][T16641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.529614][T16641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.601890][T16837] netlink: 'syz.3.2952': attribute type 2 has an invalid length. [ 453.612466][T16641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.639701][T16641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.653163][T16837] netlink: 'syz.3.2952': attribute type 2 has an invalid length. [ 453.673473][T16837] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.2952'. [ 453.696378][T16641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.832376][T16846] block nbd0: Unsupported socket: should be TCP or UNIX. [ 453.857297][T16846] netlink: 'syz.4.2953': attribute type 2 has an invalid length. [ 453.955600][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.043362][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.075916][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.163533][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.247817][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.289717][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.301043][T16641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.313306][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.365197][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.373712][T16861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2957'. [ 454.398368][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.440630][T16641] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.469785][T16854] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 454.512754][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.520112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.745020][T16867] netlink: 'syz.4.2959': attribute type 10 has an invalid length. [ 454.834660][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.841922][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.880539][T16871] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 454.969697][T16867] team0: Device veth0_macvtap failed to register rx_handler [ 455.330294][T16885] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2963'. [ 455.505360][ T29] audit: type=1804 audit(1786106525.910:9): pid=16885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2963" name="/newroot/617/cgroup.controllers" dev="tmpfs" ino=3185 res=1 errno=0 [ 455.692526][ T29] audit: type=1800 audit(1786106525.910:10): pid=16885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2963" name="cgroup.controllers" dev="tmpfs" ino=3185 res=0 errno=0 [ 456.020616][T16901] netlink: 'syz.3.2967': attribute type 83 has an invalid length. [ 456.047337][T16897] team0: Device ipvlan0 failed to register rx_handler [ 456.146865][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 456.364327][T16909] pim6reg: entered allmulticast mode [ 456.421676][T16906] bridge0: port 2(wlan1) entered blocking state [ 456.467861][T16906] bridge0: port 2(wlan1) entered disabled state [ 456.516189][T16906] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 456.536203][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2971'. [ 456.573422][T16906] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 457.025965][T16926] netlink: 'syz.1.2973': attribute type 7 has an invalid length. [ 457.157024][T16932] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2976'. [ 457.872807][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'. [ 457.931364][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 457.960389][T16965] IPv6: NLM_F_CREATE should be specified when creating new route [ 457.979630][T16964] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.100171][T16641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.354722][T16971] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2983'. [ 458.443602][T16974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2983'. [ 458.564466][T16641] veth0_vlan: entered promiscuous mode [ 458.690602][T16641] veth1_vlan: entered promiscuous mode [ 458.949239][T16983] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2987'. [ 458.989461][T16641] veth0_macvtap: entered promiscuous mode [ 459.053077][T16641] veth1_macvtap: entered promiscuous mode [ 459.136511][T16641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.267121][T16641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.437863][T11040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.599920][T11037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.664532][T17007] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2991'. [ 459.719178][T11035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.119382][ T33] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.668677][T17020] macvlan0: entered promiscuous mode [ 461.163248][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.244178][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.502256][T11032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.522825][T11032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.654693][T17045] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3001'. [ 462.312297][T17061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.543509][T17068] netlink: 'syz.3.3007': attribute type 11 has an invalid length. [ 462.572887][T17068] netlink: 'syz.3.3007': attribute type 4 has an invalid length. [ 462.609624][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'. [ 462.640513][T17068] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3007'. [ 462.652811][T17061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.771867][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.784967][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.793064][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.802241][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.812803][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.022381][T17063] bond1: option lp_interval: invalid value (0) [ 463.050566][T17063] bond1: option lp_interval: allowed values 1 - 2147483647 [ 463.100090][T17063] bond1 (unregistering): Released all slaves [ 463.234010][T17064] ip_vti0: entered promiscuous mode [ 463.267208][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'. [ 463.813025][T17081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3009'. [ 463.899532][T17081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3009'. [ 463.932805][T17084] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 463.964597][T17086] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3009'. [ 464.542614][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.571834][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.899119][ T5623] Bluetooth: hci3: command tx timeout [ 465.159792][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'. [ 465.213588][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.296504][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.400769][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'. [ 465.466500][T17121] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3022'. [ 465.505331][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.531099][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.953950][T17129] bond0: entered promiscuous mode [ 465.964129][T17136] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 466.108937][T17129] bond_slave_0: entered promiscuous mode [ 466.115567][T17129] bond_slave_1: entered promiscuous mode [ 466.201294][T17129] gretap0: entered promiscuous mode [ 466.281243][T17129] hsr1: entered promiscuous mode [ 466.315433][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.386627][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.672838][T17143] __nla_validate_parse: 2 callbacks suppressed [ 466.672858][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 466.989026][ T5623] Bluetooth: hci3: command tx timeout [ 467.121080][T17156] netlink: 'syz.0.3029': attribute type 3 has an invalid length. [ 467.190299][T17156] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3029'. [ 467.463171][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 467.501353][T17162] nbd4: detected capacity change from 0 to 63 [ 467.788238][ T5623] block nbd4: Receive control failed (result -104) [ 468.051768][ T1117] bridge_slave_1: left allmulticast mode [ 468.088986][ T1117] bridge_slave_1: left promiscuous mode [ 468.132947][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.174776][ T1117] ¾x9ÿ: left allmulticast mode [ 468.192869][ T1117] ¾x9ÿ: left promiscuous mode [ 468.207736][ T1117] bridge0: port 1(1¾x9ÿ) entered disabled state [ 468.357798][ T1117] pim6reg: left allmulticast mode [ 469.057891][ T5623] Bluetooth: hci3: command tx timeout [ 469.775792][ T1117] team0: Port device geneve1 removed [ 469.873388][ T1117] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 469.940209][ T1117] bond3 (unregistering): (slave bridge5): Releasing active interface [ 470.008272][ T1117] bond1 (unregistering): Released all slaves [ 470.058971][ T1117] bond2 (unregistering): Released all slaves [ 470.094289][ T1117] bond0 (unregistering): Released all slaves [ 470.144728][ T1117] [ 470.147117][ T1117] ====================================================== [ 470.154180][ T1117] WARNING: possible circular locking dependency detected [ 470.161291][ T1117] syzkaller #0 Not tainted [ 470.165720][ T1117] ------------------------------------------------------ [ 470.172793][ T1117] kworker/u8:9/1117 is trying to acquire lock: [ 470.178971][ T1117] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 470.189048][ T1117] [ 470.189048][ T1117] but task is already holding lock: [ 470.196432][ T1117] ffffffff8f5dd680 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 470.205311][ T1117] [ 470.205311][ T1117] which lock already depends on the new lock. [ 470.205311][ T1117] [ 470.215734][ T1117] [ 470.215734][ T1117] the existing dependency chain (in reverse order) is: [ 470.224767][ T1117] [ 470.224767][ T1117] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 470.232093][ T1117] __mutex_lock+0x19d/0x1550 [ 470.237373][ T1117] get_device_parent+0x16f/0x3a0 [ 470.242864][ T1117] device_add+0x2d4/0xb80 [ 470.247741][ T1117] device_create+0x269/0x300 [ 470.252874][ T1117] msr_device_create+0x33/0x50 [ 470.258237][ T1117] cpuhp_invoke_callback+0x434/0x810 [ 470.264085][ T1117] cpuhp_thread_fun+0x362/0x780 [ 470.269484][ T1117] smpboot_thread_fn+0x57c/0xa80 [ 470.274973][ T1117] kthread+0x388/0x470 [ 470.279592][ T1117] ret_from_fork+0x514/0xb70 [ 470.284770][ T1117] ret_from_fork_asm+0x1a/0x30 [ 470.290117][ T1117] [ 470.290117][ T1117] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 470.297823][ T1117] cpuhp_thread_fun+0x127/0x780 [ 470.303222][ T1117] smpboot_thread_fn+0x57c/0xa80 [ 470.308715][ T1117] kthread+0x388/0x470 [ 470.313337][ T1117] ret_from_fork+0x514/0xb70 [ 470.318478][ T1117] ret_from_fork_asm+0x1a/0x30 [ 470.323797][ T1117] [ 470.323797][ T1117] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 470.331570][ T1117] cpus_read_lock+0x42/0x160 [ 470.336718][ T1117] static_key_slow_inc+0x12/0x30 [ 470.342437][ T1117] setup_udp_tunnel_sock+0x2df/0x4f0 [ 470.348380][ T1117] l2tp_tunnel_register+0xe77/0x1570 [ 470.354299][ T1117] pppol2tp_connect+0x8e3/0x18b0 [ 470.359798][ T1117] __sys_connect+0x323/0x460 [ 470.365076][ T1117] __x64_sys_connect+0x7a/0x90 [ 470.370401][ T1117] do_syscall_64+0x174/0x580 [ 470.375653][ T1117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.382135][ T1117] [ 470.382135][ T1117] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 470.389900][ T1117] lock_sock_nested+0x41/0x100 [ 470.395318][ T1117] inet_shutdown+0x6a/0x390 [ 470.400457][ T1117] nbd_mark_nsock_dead+0x2cb/0x550 [ 470.406261][ T1117] recv_work+0x1cee/0x1e10 [ 470.411237][ T1117] process_scheduled_works+0xa8e/0x14e0 [ 470.417345][ T1117] worker_thread+0xa47/0xfb0 [ 470.422489][ T1117] kthread+0x388/0x470 [ 470.427115][ T1117] ret_from_fork+0x514/0xb70 [ 470.432260][ T1117] ret_from_fork_asm+0x1a/0x30 [ 470.437591][ T1117] [ 470.437591][ T1117] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 470.445281][ T1117] __mutex_lock+0x19d/0x1550 [ 470.450423][ T1117] nbd_queue_rq+0x373/0x1150 [ 470.455604][ T1117] blk_mq_dispatch_rq_list+0x499/0x1990 [ 470.461841][ T1117] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 470.468824][ T1117] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 470.475380][ T1117] blk_mq_run_work_fn+0x16c/0x300 [ 470.480963][ T1117] process_scheduled_works+0xa8e/0x14e0 [ 470.487065][ T1117] worker_thread+0xa47/0xfb0 [ 470.492208][ T1117] kthread+0x388/0x470 [ 470.496833][ T1117] ret_from_fork+0x514/0xb70 [ 470.501977][ T1117] ret_from_fork_asm+0x1a/0x30 [ 470.507301][ T1117] [ 470.507301][ T1117] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 470.514549][ T1117] __mutex_lock+0x19d/0x1550 [ 470.519693][ T1117] nbd_queue_rq+0xc1/0x1150 [ 470.524751][ T1117] blk_mq_dispatch_rq_list+0x499/0x1990 [ 470.530856][ T1117] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 470.537732][ T1117] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 470.544275][ T1117] blk_mq_run_work_fn+0x16c/0x300 [ 470.549856][ T1117] process_scheduled_works+0xa8e/0x14e0 [ 470.555948][ T1117] worker_thread+0xa47/0xfb0 [ 470.561087][ T1117] kthread+0x388/0x470 [ 470.565706][ T1117] ret_from_fork+0x514/0xb70 [ 470.570844][ T1117] ret_from_fork_asm+0x1a/0x30 [ 470.576160][ T1117] [ 470.576160][ T1117] -> #5 (set->srcu){.+.+}-{0:0}: [ 470.583321][ T1117] __synchronize_srcu+0xc9/0x2f0 [ 470.588860][ T1117] elevator_switch+0x1e8/0x7b0 [ 470.594246][ T1117] elevator_change+0x2fa/0x480 [ 470.599562][ T1117] elevator_set_default+0x375/0x440 [ 470.605306][ T1117] blk_register_queue+0x3f3/0x4e0 [ 470.610963][ T1117] __add_disk+0x6cb/0xe30 [ 470.615848][ T1117] add_disk_fwnode+0x100/0x3a0 [ 470.621204][ T1117] nbd_dev_add+0x733/0xb60 [ 470.626190][ T1117] nbd_init+0x15f/0x1e0 [ 470.631027][ T1117] do_one_initcall+0x250/0x870 [ 470.636345][ T1117] do_initcall_level+0x10a/0x1a0 [ 470.641901][ T1117] do_initcalls+0x59/0xa0 [ 470.646774][ T1117] kernel_init_freeable+0x29d/0x3e0 [ 470.652517][ T1117] kernel_init+0x1d/0x1d0 [ 470.657400][ T1117] ret_from_fork+0x514/0xb70 [ 470.662535][ T1117] ret_from_fork_asm+0x1a/0x30 [ 470.667857][ T1117] [ 470.667857][ T1117] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 470.675746][ T1117] __mutex_lock+0x19d/0x1550 [ 470.680909][ T1117] elevator_change+0x1af/0x480 [ 470.686220][ T1117] elevator_set_none+0xb5/0x140 [ 470.691615][ T1117] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 470.697970][ T1117] nbd_start_device+0x189/0xb30 [ 470.703379][ T1117] nbd_genl_connect+0x1597/0x1c10 [ 470.708957][ T1117] genl_family_rcv_msg_doit+0x233/0x340 [ 470.715151][ T1117] genl_rcv_msg+0x614/0x7a0 [ 470.720220][ T1117] netlink_rcv_skb+0x226/0x4a0 [ 470.725554][ T1117] genl_rcv+0x28/0x40 [ 470.730084][ T1117] netlink_unicast+0x7bb/0x940 [ 470.735460][ T1117] netlink_sendmsg+0x813/0xb40 [ 470.740768][ T1117] sock_sendmsg_nosec+0x13a/0x180 [ 470.746346][ T1117] ____sys_sendmsg+0x54e/0x850 [ 470.751647][ T1117] ___sys_sendmsg+0x2a5/0x360 [ 470.756892][ T1117] __x64_sys_sendmsg+0x1b1/0x290 [ 470.762378][ T1117] do_syscall_64+0x174/0x580 [ 470.767516][ T1117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.773951][ T1117] [ 470.773951][ T1117] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 470.782610][ T1117] blk_alloc_queue+0x544/0x690 [ 470.787920][ T1117] __blk_mq_alloc_disk+0x194/0x390 [ 470.793582][ T1117] nbd_dev_add+0x494/0xb60 [ 470.798543][ T1117] nbd_init+0x15f/0x1e0 [ 470.803239][ T1117] do_one_initcall+0x250/0x870 [ 470.808588][ T1117] do_initcall_level+0x10a/0x1a0 [ 470.814067][ T1117] do_initcalls+0x59/0xa0 [ 470.818939][ T1117] kernel_init_freeable+0x29d/0x3e0 [ 470.824677][ T1117] kernel_init+0x1d/0x1d0 [ 470.829560][ T1117] ret_from_fork+0x514/0xb70 [ 470.834704][ T1117] ret_from_fork_asm+0x1a/0x30 [ 470.840051][ T1117] [ 470.840051][ T1117] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 470.847303][ T1117] fs_reclaim_acquire+0x71/0x100 [ 470.852831][ T1117] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 470.859093][ T1117] alloc_inode+0xb8/0x1b0 [ 470.864005][ T1117] iget_locked+0x131/0x6a0 [ 470.868975][ T1117] kernfs_get_inode+0x4f/0x770 [ 470.874301][ T1117] kernfs_get_tree+0x5cd/0x980 [ 470.879605][ T1117] vfs_get_tree+0x92/0x2a0 [ 470.884587][ T1117] do_new_mount+0x319/0xdc0 [ 470.889659][ T1117] __se_sys_mount+0x31d/0x420 [ 470.894882][ T1117] do_syscall_64+0x174/0x580 [ 470.900016][ T1117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.906451][ T1117] [ 470.906451][ T1117] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 470.914476][ T1117] down_write+0x96/0x200 [ 470.919267][ T1117] kernfs_remove_by_name_ns+0x4e/0x140 [ 470.925269][ T1117] device_links_driver_bound+0x4ab/0x1440 [ 470.931545][ T1117] driver_bound+0xd8/0x2e0 [ 470.936525][ T1117] really_probe+0x774/0xae0 [ 470.941651][ T1117] __driver_probe_device+0x1e8/0x360 [ 470.947477][ T1117] driver_probe_device+0x4f/0x240 [ 470.953040][ T1117] __device_attach_driver+0x270/0x410 [ 470.958952][ T1117] bus_for_each_drv+0x258/0x2f0 [ 470.964348][ T1117] __device_attach+0x2c4/0x450 [ 470.969648][ T1117] device_initial_probe+0xa1/0xd0 [ 470.975213][ T1117] bus_probe_device+0x12a/0x220 [ 470.980603][ T1117] device_add+0x7d7/0xb80 [ 470.985478][ T1117] faux_device_create_with_groups+0x1a5/0x2b0 [ 470.992156][ T1117] regulator_dummy_init+0x19/0x40 [ 470.997820][ T1117] regulator_init+0xca/0x110 [ 471.002960][ T1117] do_one_initcall+0x250/0x870 [ 471.008289][ T1117] do_initcall_level+0x10a/0x1a0 [ 471.013777][ T1117] do_initcalls+0x59/0xa0 [ 471.018672][ T1117] kernel_init_freeable+0x29d/0x3e0 [ 471.024416][ T1117] kernel_init+0x1d/0x1d0 [ 471.029312][ T1117] ret_from_fork+0x514/0xb70 [ 471.034455][ T1117] ret_from_fork_asm+0x1a/0x30 [ 471.039773][ T1117] [ 471.039773][ T1117] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 471.048430][ T1117] __lock_acquire+0x1520/0x2cf0 [ 471.053872][ T1117] lock_acquire+0x106/0x350 [ 471.058925][ T1117] down_read+0x4a/0x330 [ 471.063626][ T1117] kernfs_remove+0x35/0x80 [ 471.068591][ T1117] __kobject_del+0xe0/0x310 [ 471.073758][ T1117] kobject_del+0x45/0x60 [ 471.078547][ T1117] cleanup_glue_dir+0x1a3/0x220 [ 471.083951][ T1117] device_del+0x77d/0x8f0 [ 471.088841][ T1117] device_destroy+0xb2/0x1a0 [ 471.093976][ T1117] macvtap_device_event+0x226/0x400 [ 471.099849][ T1117] notifier_call_chain+0x1a5/0x3d0 [ 471.105523][ T1117] unregister_netdevice_many_notify+0x17f9/0x2140 [ 471.112541][ T1117] macvlan_device_event+0x7e8/0x880 [ 471.118290][ T1117] notifier_call_chain+0x1a5/0x3d0 [ 471.123966][ T1117] unregister_netdevice_many_notify+0x17f9/0x2140 [ 471.130927][ T1117] ops_undo_list+0x391/0x8d0 [ 471.136162][ T1117] cleanup_net+0x572/0x810 [ 471.141133][ T1117] process_scheduled_works+0xa8e/0x14e0 [ 471.147251][ T1117] worker_thread+0xa47/0xfb0 [ 471.152392][ T1117] kthread+0x388/0x470 [ 471.157015][ T1117] ret_from_fork+0x514/0xb70 [ 471.162268][ T1117] ret_from_fork_asm+0x1a/0x30 [ 471.167586][ T1117] [ 471.167586][ T1117] other info that might help us debug this: [ 471.167586][ T1117] [ 471.177827][ T1117] Chain exists of: [ 471.177827][ T1117] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 471.177827][ T1117] [ 471.191251][ T1117] Possible unsafe locking scenario: [ 471.191251][ T1117] [ 471.198745][ T1117] CPU0 CPU1 [ 471.204200][ T1117] ---- ---- [ 471.209591][ T1117] lock(gdp_mutex); [ 471.213516][ T1117] lock(cpuhp_state-up); [ 471.220416][ T1117] lock(gdp_mutex); [ 471.226856][ T1117] rlock(&root->kernfs_supers_rwsem); [ 471.232344][ T1117] [ 471.232344][ T1117] *** DEADLOCK *** [ 471.232344][ T1117] [ 471.240574][ T1117] 5 locks held by kworker/u8:9/1117: [ 471.245878][ T1117] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.256859][ T1117] #1: ffffc900056efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 471.267431][ T1117] #2: ffffffff90018348 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 471.276796][ T1117] #3: ffffffff90026f00 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 471.285901][ T1117] #4: ffffffff8f5dd680 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 471.295089][ T1117] [ 471.295089][ T1117] stack backtrace: [ 471.301013][ T1117] CPU: 0 UID: 0 PID: 1117 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 471.301038][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.301052][ T1117] Workqueue: netns cleanup_net [ 471.301085][ T1117] Call Trace: [ 471.301180][ T1117] [ 471.301199][ T1117] dump_stack_lvl+0xe8/0x150 [ 471.301293][ T1117] print_circular_bug+0x2e1/0x300 [ 471.301329][ T1117] check_noncircular+0x12e/0x150 [ 471.301366][ T1117] __lock_acquire+0x1520/0x2cf0 [ 471.301406][ T1117] ? kernfs_remove+0x35/0x80 [ 471.301437][ T1117] lock_acquire+0x106/0x350 [ 471.301463][ T1117] ? kernfs_remove+0x35/0x80 [ 471.301500][ T1117] down_read+0x4a/0x330 [ 471.301527][ T1117] ? kernfs_remove+0x35/0x80 [ 471.301559][ T1117] kernfs_remove+0x35/0x80 [ 471.301591][ T1117] __kobject_del+0xe0/0x310 [ 471.301623][ T1117] kobject_del+0x45/0x60 [ 471.301652][ T1117] cleanup_glue_dir+0x1a3/0x220 [ 471.301687][ T1117] device_del+0x77d/0x8f0 [ 471.301723][ T1117] ? __pfx_device_del+0x10/0x10 [ 471.301756][ T1117] ? kobject_put+0x50f/0x550 [ 471.301787][ T1117] device_destroy+0xb2/0x1a0 [ 471.301807][ T1117] ? __pfx_device_destroy+0x10/0x10 [ 471.301830][ T1117] ? kernfs_remove_by_name_ns+0x101/0x140 [ 471.301853][ T1117] macvtap_device_event+0x226/0x400 [ 471.301884][ T1117] ? __pfx_macvtap_device_event+0x10/0x10 [ 471.301918][ T1117] notifier_call_chain+0x1a5/0x3d0 [ 471.301950][ T1117] unregister_netdevice_many_notify+0x17f9/0x2140 [ 471.301984][ T1117] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 471.302013][ T1117] ? netdev_upper_dev_unlink+0x99/0xe0 [ 471.302073][ T1117] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 471.302115][ T1117] ? macvlan_dellink+0x3e4/0x470 [ 471.302142][ T1117] macvlan_device_event+0x7e8/0x880 [ 471.302171][ T1117] ? __pfx_macvlan_device_event+0x10/0x10 [ 471.302205][ T1117] notifier_call_chain+0x1a5/0x3d0 [ 471.302237][ T1117] unregister_netdevice_many_notify+0x17f9/0x2140 [ 471.302270][ T1117] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 471.302302][ T1117] ? rtnl_is_locked+0x15/0x20 [ 471.302363][ T1117] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 471.302441][ T1117] ops_undo_list+0x391/0x8d0 [ 471.302475][ T1117] ? __pfx_ops_undo_list+0x10/0x10 [ 471.302506][ T1117] ? idr_destroy+0x218/0x290 [ 471.302561][ T1117] ? do_raw_spin_unlock+0xf5/0x210 [ 471.302585][ T1117] cleanup_net+0x572/0x810 [ 471.302616][ T1117] ? __pfx_cleanup_net+0x10/0x10 [ 471.302648][ T1117] ? rcu_is_watching+0x15/0xb0 [ 471.302680][ T1117] ? process_scheduled_works+0xa20/0x14e0 [ 471.302702][ T1117] process_scheduled_works+0xa8e/0x14e0 [ 471.302739][ T1117] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.302765][ T1117] ? assign_work+0x3cf/0x5d0 [ 471.302788][ T1117] worker_thread+0xa47/0xfb0 [ 471.302819][ T1117] ? __kthread_parkme+0x71/0x1f0 [ 471.302849][ T1117] kthread+0x388/0x470 [ 471.302876][ T1117] ? __pfx_worker_thread+0x10/0x10 [ 471.302898][ T1117] ? __pfx_kthread+0x10/0x10 [ 471.302925][ T1117] ret_from_fork+0x514/0xb70 [ 471.302955][ T1117] ? __pfx_ret_from_fork+0x10/0x10 [ 471.302983][ T1117] ? __switch_to+0xc89/0x1420 [ 471.303008][ T1117] ? __pfx_kthread+0x10/0x10 [ 471.303036][ T1117] ret_from_fork_asm+0x1a/0x30 [ 471.303074][ T1117] [ 471.628818][ T5623] Bluetooth: hci3: command tx timeout [ 471.730457][ T1117] bond3 (unregistering): Released all slaves [ 471.744441][ T1117] bond4 (unregistering): Released all slaves [ 471.759769][ T1117] bond5 (unregistering): Released all slaves [ 471.773939][ T1117] bond6 (unregistering): (slave veth7): Releasing active interface [ 471.790622][ T1117] bond6 (unregistering): Released all slaves [ 471.805570][ T1117] bond7 (unregistering): Released all slaves [ 471.818260][ T1117] bond8 (unregistering): Released all slaves [ 471.831581][ T1117] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 471.841797][ T1117] bond9 (unregistering): Released all slaves [ 471.859894][T17173] tc_dump_action: action bad kind [ 471.933913][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 472.112647][ T1117] tipc: Disabling bearer [ 472.125214][ T1117] tipc: Left network mode [ 472.648897][T17071] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.672649][T17071] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.686967][T17071] bridge_slave_0: entered allmulticast mode [ 472.703101][T17071] bridge_slave_0: entered promiscuous mode [ 472.732988][ T1117] hsr_slave_0: left promiscuous mode [ 472.753040][ T1117] hsr_slave_1: left promiscuous mode [ 472.769214][ T1117] veth1_vlan: left promiscuous mode [ 473.090207][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 473.122751][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 473.255292][T17071] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.262613][T17071] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.269947][T17071] bridge_slave_1: entered allmulticast mode [ 473.277336][T17071] bridge_slave_1: entered promiscuous mode [ 473.288538][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 473.382850][T17071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.394681][T17071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.439112][T17071] team0: Port device team_slave_0 added [ 473.456948][T17071] team0: Port device team_slave_1 added [ 473.520150][T17071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.535074][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.624429][T17071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.652470][T17071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.667534][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.763185][T17071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.904114][ T1117] IPVS: stop unused estimator thread 0... [ 473.923714][T17071] hsr_slave_0: entered promiscuous mode [ 473.959863][T17071] hsr_slave_1: entered promiscuous mode [ 473.986808][T17071] debugfs: 'hsr0' already exists in 'hsr' [ 474.004693][T17071] Cannot create hsr debugfs directory [ 474.663216][T17071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.700421][T17071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.720785][T17071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.751307][T17071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.768125][T17071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.787131][T17071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.810165][T17071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.843818][T17071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.041585][T17071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.111762][T17071] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.140624][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.147833][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.191380][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.198565][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.149096][T17071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.255487][T17071] veth0_vlan: entered promiscuous mode [ 476.286922][T17071] veth1_vlan: entered promiscuous mode [ 476.365934][T17071] veth0_macvtap: entered promiscuous mode [ 476.394522][T17071] veth1_macvtap: entered promiscuous mode [ 476.425865][T17071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.457090][T17071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.507571][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.558452][ T1096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.607009][T17071] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 476.669558][T11037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.681029][T17071] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 476.689226][T11037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.726838][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.734848][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.753031][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.762680][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50